Security Researcher

We are looking for someone who breaks things—and turns the research into reliable offensive capability.

You find vulnerabilities, develop exploits, and prove they work. Then you take them beyond the PoC: stabilize them, engineer them, and turn them into dependable tools built to perform under real-world conditions.

The work spans a wide range of platforms and environments: OS internals and kernels, firmware, mobile, hypervisors, user space, cloud environments, and attacks on and through AI systems.

We need people who:

• Pull threads until they unravel (threat hunter instinct)
• Can take on any target, including systems and platforms they have never encountered before
• Work across platforms: kernel, firmware, mobile, IoT, virtualization, user space, cloud, and AI
• See the full arc: from vulnerability research and exploit development to a stable, reliable capability
• Understand that a working exploit is only the beginning
• Care about reliability, precision, repeatability, and performance under real-world conditions
• Stay calm in “I don’t understand this yet” and methodically work through it
• Use modern AI as an integral part of their workflow and as a force multiplier
• Do exceptional work that stays confidential

We don't care about CVE counts or conference talks. We assess capability directly through hands-on technical evaluation against real problems.

Around seven years of serious hands-on security work is expected, but traits matter more than tenure. Scars from real trenches are worth more than a polished resume.

Experience with operational offensive security or red teaming is a plus.

About Us

CoreSecurity is built from a small group of people held to an uncommon bar. We do vulnerability research and exploit development as a service for clients who operate at the sharp end: security agencies, and private and government organizations that need to understand how their systems actually break.

Our deliverable is defensive software. The research is how we get there: we study how a system actually breaks, then build the software that stops it. Most of this work is confidential and won't carry your name.

Why this is a good seat

You'll work alongside people with genuine depth, on hard problems, for clients who bring the ones worth solving. You won't be bored, and not because we invent busywork—when there's no target in front of you, our people research, sharpen, and explore.

If that sounds like your kind of work, we'd like to talk.