Vulnerability Researcher

We are looking for a senior Offensive Security Researcher with deep expertise in exploit development, offensive security and low-level research.

In this role, you will play a key part in leading offensive research initiatives and building end-to-end exploits.

The work spans a wide range of platforms and environments: OS internals and kernels, firmware, mobile, hypervisors, user space, cloud environments, and attacks on and through AI systems.

We don't care about CVE counts or conference talks. We assess capability directly through hands-on technical evaluation against real problems.

We need people who:

• Pull threads until they unravel (threat hunter instinct)
• Conduct vulnerability research and reverse engineering across complex environments.
• Develop end-to-end Proof-of-Concept (PoC) exploits and custom malware.
• Perform deep-dive privilege escalation assessments and target hybrid cloud attack surfaces.
• Can take on any target, including systems and platforms they have never encountered before
• Work across platforms: kernel, firmware, mobile, IoT, virtualization, user space, cloud, and AI
• See the full arc: from vulnerability research and exploit development to a stable, reliable capability
• Use modern AI as an integral part of their workflow and as a force multiplier
• Do exceptional work that stays confidential

About Us

CoreSecurity is built from a small group of people held to an uncommon bar. We do vulnerability research and exploit development as a service for clients who operate at the sharp end: security agencies, and private and government organizations that need to understand how their systems actually break.

Our deliverable is defensive software. The research is how we get there: we study how a system actually breaks, then build the software that stops it. Most of this work is confidential and won't carry your name.

If that sounds like your kind of work, we'd like to talk.