5 months ago
Remote, Worldwide +2 moreSenior
Base Salary
$155k - $194k/yr
Responsibilities
- Design, develop, and validate novel vulnerability discovery and exploitation capabilities.
- Conduct expert reverse engineering of complex binaries.
- Identify and exploit real-world vulnerabilities across multiple vulnerability classes.
- Discover novel vulnerabilities in complex systems using current vulnerability research, manual analysis, automated techniques, and fuzzing.
- Independently scope, research, experiment, validate, and iterate on research objectives.
- Travel to customer sites and perform work in cleared spaces as required.
Requirements
- Expertise in reverse engineering x86-64 and ARM64 binaries using Binary Ninja, Ghidra, or IDA Pro.
- Strong understanding of stack and heap objects and exploit-relevant vulnerabilities including use-after-free, type confusion, integer truncation, and buffer overflow.
- Demonstrated ability to discover new vulnerabilities rather than only exploit known vulnerabilities.
- Experience with manual analysis and automated vulnerability discovery techniques such as fuzzing.
- Ability to code and debug complex functions in C, Python, and Assembly for x86-64 and ARM architectures.
- Ability to independently translate under-defined mission objectives into technically novel capabilities and work with minimal supervision.
- TS/SCI clearance is required; inactive SCI is acceptable if the candidate is SCI-clearable.
- Ability to travel to customer sites and perform on-site work for extended periods.
- Ability to meet the stated physical requirements with or without reasonable accommodation.
Benefits
- Remote work-from-home arrangement with travel to customer locations in Alabama for work in cleared spaces.
- Travel to customer sites and on-site work for extended periods as required.
- Eligibility for a discretionary bonus program or commission plan.
- Reasonable accommodations are available for qualified individuals.
About Bugcrowd
We are a crowdsourced security company that safeguards organizations' assets from sophisticated threat actors before they can strike—by uniting our customers with trusted hackers via our AI-powered platform to take back control and stay ahead of attackers. Bugcrowd is backed by Blackbird Ventures, Costanoa Ventures, Industry Ventures, Paladin Capital Group, Rally Ventures, Salesforce Ventures and Triangle Peak Partners.