Experienced Vulnerability Researcher

Salary: £61,000 - 101,000 per year

Requirements:

• We are looking for candidates with a bug hunting, ethical hacking or reverse engineering background.
• We require an inquisitive mindset and enthusiasm for solving difficult research tasks.
• We are seeking experienced researchers with skills and experience in several of the listed areas, as well as the ability to lead technical projects.
• We value a passion for cyber security and an interest in bug hunting and recent vulnerabilities.
• We expect familiarity with reverse engineering in IDA Pro or Ghidra.
• We expect familiarity with one or more of ARM, AARCH64, x86, x64 and MIPS.
• We expect knowledge of bug hunting and vulnerability research.
• We expect ethical hacking experience, including familiarity with web and network technologies.
• We expect knowledge of exploitation techniques and mitigations.
• We expect experience and knowledge of Linux and its internals.
• We expect experience and knowledge of Android or iOS and its internals.
• We expect a good understanding of C or C++.
• We value the ability to share knowledge and work with team members.

Responsibilities:

• We develop a deep understanding of how Android mobile devices work, from applications to kernel.
• We reverse engineer proprietary binaries using our knowledge of ARM, ARM64, and MIPS.
• We audit C and C++ source code to spot security flaws.
• We grow the teams capabilities by developing novel tools and techniques for cutting-edge vulnerability research.
• We work in tandem with other vulnerability researchers and software engineers.
• We design and produce niche solutions with immediate real-world impact.
• We produce proof of concepts in the most suitable language for the project, which could be C, C++, Python or assembly code.

Technologies:

• ARM
• Android
• Support
• Linux
• Mobile
• Network
• Python
• Security
• Web
• iOS
• C++

More:

We are partnering directly with CoreTech Security to hire for this vulnerability researcher role. You will join a world-class team of developers and vulnerability researchers focused on delivering bespoke products and research for some of the most interesting cyber security clients in the UK. Our team is highly experienced, deeply technical, and combines rapid prototyping, security research and software engineering. We use Ghidra as our tool of choice for reverse engineering. We also offer a strong benefits package, including promotions based on technical excellence, 25 days holiday plus bank holidays, holiday purchase options, additional holiday accrual with service, relocation support, training and development opportunities, an OReilly books subscription, regular technical and social events, free refreshments, private medical cover and healthcare support, an annual bonus scheme, 8% company pension contribution, life cover, enhanced maternity/paternity/adoption leave, and an enhanced cycle-to-work scheme.

last updated 39 week of 2026