Principal Vulnerability Researcher

?Principal Vulnerability Researcher

Hybrid – 3 days a week in the Gloucester office or customer sites.

Role Overview
Our client, a leading organisation in the defence and cybersecurity sector, is seeking a highly skilled and analytically driven Vulnerability Researcher to join its Cyber Research Group. This is an exciting opportunity to support advanced research and development initiatives, conducting in-depth technical investigations across hardware and software systems to identify security vulnerabilities, develop bespoke tools, and contribute to the discovery and analysis of emerging threats. The ideal candidate will combine a strong technical foundation with excellent problem-solving skills and the ability to collaborate effectively within multidisciplinary teams.

Key Responsibilities

• Perform hardware and software teardowns, characterisation, and reverse engineering.
• Conduct detailed analysis of platforms to identify security weaknesses, bugs, and potential exploits.
• Examine network protocols and system behaviours to uncover vulnerabilities.
• Collaborate with cross-functional teams to deliver innovative technical solutions and research outcomes.
• Produce clear, structured documentation of findings, methodologies, and recommendations for both internal and external stakeholders.
• Support business development efforts, including proposal writing and technical briefings.

Essential Skills and Experience

• Proficiency in at least one programming language (C, C++, Python).
• Familiarity with assembly language (reading or writing).
• Experience in reverse engineering using tools such as IDA Pro, Ghidra, or Binary Ninja.
• Strong knowledge of Linux-based systems, including command-line tools and system configuration.
• Demonstrated analytical and problem-solving skills, with a methodical and inquisitive approach to technical challenges.
• Solid understanding of network protocols.
• Ability to rapidly learn and adapt to new technologies and domains.
• Proven track record of identifying, analysing, and reporting vulnerabilities in complex systems.

Desirable Experience

• Experience using or developing fuzzers.
• Practical experience emulating hardware platforms with QEMU or similar tools to support security research and analysis.
• Embedded software development for platforms such as ARM Cortex, AVR, or MIPS.
• Familiarity with Radio Frequency (RF) systems and Software Defined Radios (SDRs), including 2G/4G/5G technologies and tools such as GNU Radio, Osmocom, srsRAN, or USRP.
• Network engineering experience (professional or home lab).
• Hardware development and prototyping, including PCB design and microcontroller programming.

Benefits

• Competitive salary with annual bonus and market leading pension
• Lifa assurance
• 25 days holiday + bank holidays
• Extensive softer and flexi-benefits