Low Level Security Researcher

Product Security Low-Level Researcher

About the Role

We are looking for a Product Security Low-Level Researcher to conduct deep technical research across operating systems, kernels, drivers, and other low-level system components that underpin modern enterprise platforms.

In this role, you will investigate complex attack surfaces, uncover subtle yet high-impact vulnerabilities, and translate advanced research into practical security improvements. The position requires strong systems knowledge, hands-on experimentation, and the ability to perform original research beyond the application layer.

Key Responsibilities:

Low-Level Vulnerability Research

Research and discover vulnerabilities in operating system kernels, drivers, system services, virtualization layers, and other low-level components that impact execution environments and trust boundaries.

Kernel & OS Internals Analysis

Analyze kernel subsystems such as memory management, scheduling, IPC, filesystems, and networking to identify design flaws, logic bugs, and exploitation opportunities.

Exploit Development & Validation

Develop proof-of-concept exploits for kernel and driver vulnerabilities to validate impact, evaluate exploitability, and guide mitigation strategies.

Security Testing & Tooling

Design and build custom tooling for kernel fuzzing, syscall and interface testing, driver analysis, and low-level system instrumentation.

Cryptography & Trust Mechanisms

Assess implementations of cryptographic primitives, key management, secure boot, attestation, and hardware-backed security features to identify weaknesses or misuse patterns.

System-Level Threat Modeling

Collaborate with platform engineers and security teams to model threats across privilege boundaries, boot chains, isolation mechanisms, and OS-level integrations.

Research & Knowledge Sharing

Stay current with emerging kernel exploitation techniques and advanced threat tradecraft, contributing findings to internal research, design guidance, and long-term security strategy.

Qualifications

• Strong understanding of operating system internals, kernel architectures, or driver development (Linux, Windows, macOS, or mobile operating systems).
• Hands-on experience with low-level programming in C/C++, Rust, or assembly.
• Scripting experience (e.g., Python) for tooling and automation.
• Background in kernel vulnerability research, driver auditing, exploit development, or advanced reverse engineering.
• Deep familiarity with vulnerability classes such as use-after-free, race conditions, logic bugs, privilege escalation, and sandbox or isolation bypasses.
• Experience with kernel debuggers, fuzzing frameworks, emulation environments, or virtualization-based analysis tools.
• Strong research mindset, curiosity, and passion for exploring systems at their lowest layers.