3 months ago
Cambridge, United KingdomStaff+
Responsibilities
- Map and prioritize fuzzing surfaces across services, libraries, APIs, and protocols and maintain a risk-based roadmap.
- Design, build, and extend fuzzing harnesses using frameworks such as libFuzzer, AFL++, and Honggfuzz.
- Improve code coverage through seed corpus growth, targeted mutation strategies, and new instrumentation techniques.
- Automate crash triage and root-cause analysis, distinguish exploitable vulnerabilities from benign faults, and drive CVE-level findings to remediation.
- Develop custom sanitisers and validate fixes through differential fuzzing and regression corpora.
- Assess external disclosures, document findings and coverage metrics, and share security insights with engineering teams.
Requirements
- At least 1 year of application or product security experience with a deep focus on coverage-guided fuzzing.
- Hands-on expertise with at least one modern fuzzing framework, such as libFuzzer, AFL++, or Honggfuzz.
- Proficiency in C/C++ and strong Python scripting ability.
- Understanding of memory-safety vulnerabilities, undefined behaviour, sanitisers, and compiler instrumentation.
- Experience triaging crashes with debuggers, profilers, and reverse-engineering tools such as gdb, lldb, IDA, or Ghidra.
- Excellent written communication skills.
- Preferred qualifications include contributions to open-source fuzzing tools or sanitisers, security research publications, distributed fuzzing, cloud or Kubernetes experience, kernel or firmware fuzzing, reverse engineering, static analysis, symbolic execution, and CI/CD fuzzing integration.
Benefits
- Hybrid working patterns are determined by the team, with role-specific details shared during the application process.
- Recruitment accommodations are available upon request, including interview breaks, documents read aloud, and office accessibility support.
- Arm is an equal opportunity employer committed to a respectful and inclusive workplace.
Tech Stack
Categories
About Arm
Arm’s foundational technology is defining the future of computing. A future built by the greatest technology ecosystem in the world. A future built on Arm. Arm is everywhere technology matters. Technology matters everywhere. Together, we’ll power every technology revolution moving forward, including cloud computing, automotive and autonomous systems, IoT, the metaverse, and beyond. Changing the world. Again. On Arm.