1 day ago
Remote, United StatesStaff+
Responsibilities
- Own and evolve ARM and AArch64 execution support using emulation.
- Diagnose correctness, compatibility, and performance issues involving instruction semantics, memory management, exceptions, system calls, signals, threading, and process startup.
- Add support for ARM architectural features, instruction-set extensions, ABI variants, and execution environments.
- Investigate discrepancies between native execution, QEMU execution, and Bugcrowd analysis engines.
- Improve the performance, determinism, observability, and reliability of large-scale emulated workloads.
- Develop instruction-level and end-to-end ARM test suites and regression infrastructure.
- Debug customer binaries and firmware involving unusual platform, compiler, or operating-system behavior.
Requirements
- 6+ years of experience developing C/C++ on Linux.
- Significant experience with low-level systems software such as emulators, virtual machines, operating systems, compilers, debuggers, binary translators, hypervisors, or dynamic instrumentation systems.
- Deep understanding of ARM and/or AArch64 assembly, calling conventions, exception models, privilege levels, and memory semantics.
- Strong understanding of Linux process execution, including ELF loading, virtual memory, signals, threads, system calls, dynamic linking, and debugging facilities.
- Experience debugging complex native-code failures using tools such as GDB, LLDB, strace, perf, sanitizers, core dumps, or custom instrumentation.
- Ability to reason about instruction-level behavior and identify differences between architectures or execution engines.
- Familiarity with fuzzing, symbolic execution, dynamic binary analysis, or program instrumentation, along with strong software-design skills and experience owning technically complex systems.
- OCaml or another functional programming language is preferred.
- Background in vulnerability research, reverse engineering, or firmware analysis is preferred.
- BS in Computer Science or a related technical field, or equivalent practical experience.
- US Person status may be required for ITAR-related work.
Benefits
- Fully remote, work-from-home arrangement 100% of the time.
- Hourly pay range of $96.75–$133.03, with potential eligibility for a discretionary bonus or commission plan.
- Reasonable accommodations are available for qualified individuals with disabilities.
About Bugcrowd
Bugcrowd builds a crowdsourced security platform used by security teams to run bug bounty, vulnerability disclosure, and penetration testing programs. The service combines SaaS workflow and triage with access to a vetted hacker community, paying researchers per validated finding while customers subscribe to managed programs. Founded in 2012 and headquartered in San Francisco, the privately held company emphasizes AI-driven matching and signal processing to prioritize actionable vulnerabilities.