Vulnerability Researchers / Security Researchers

About project

We are a Barcelona-based R&D center looking for Vulnerability Researchers / Security Researchers to join our team. The role focuses on hands-on vulnerability research, including finding and exploiting vulnerabilities in complex systems such as browsers, kernels, mobile and desktop operating systems. We offer full-time remote work as well as relocation opportunities to Barcelona. Flexible working hours are supported depending on productivity and time zones.

Your area of responsibility

• Detect, analyze, and exploit vulnerabilities;

• Conduct vulnerability research across browsers, kernels, mobile and desktop operating systems, and other complex software;

• Understand the technical details of vulnerabilities and assess their real impact;

• Develop exploits, proof-of-concept code, scripts, and software modules to validate vulnerabilities;

• Perform reverse engineering and binary analysis as part of vulnerability research;

• Reverse-engineer security patches to better understand vulnerabilities;

• Use fuzzing and other research techniques to discover vulnerabilities;

• Effectively communicate vulnerability findings and their technical impact;

• Assist in the development of tools for vulnerability and security research.

Skills and requirements

• Proven hands-on experience in vulnerability research and vulnerability exploitation;

• Experience in exploit development;

• Experience in finding vulnerabilities in complex systems;

• Experience with reverse engineering;

• Knowledge of OS internals;

• Knowledge of modern exploitation techniques;

• Experience researching at least one of the following areas: browsers, kernels, mobile OSes, desktop OSes, or embedded systems;

• Experience with platforms such as Windows, Linux, macOS, iOS, or Android;

• Ability to work independently in a remote environment;

• Availability for full-time work.

Will be a plus

• Published CVEs or other proven records of discovered vulnerabilities;

• Experience finding and exploiting vulnerabilities in browsers or OS kernels;

• Experience with fuzzing;

• Participation in CTFs, security competitions, or security conferences;

• Bug bounty or independent vulnerability research experience;

• Published security research, technical write-ups, PoCs, or research tools;

• Offensive security background;

• Academic degree in Computer Science, Mathematics, or Physics;

• Good interpersonal and communication skills.