Principal Vulnerability Researcher

Principal Vulnerability Researcher

Office-based | Oxfordshire -

If relocating is required for this role, NPL may be able to provide relocation support, subject to location and eligibility. Please contact your recruiter to discuss the options available to you.

We’re growing our Vulnerability Research Team and are looking for a Principal Vulnerability Researcher to perform security research into a wide-range of carrier-grade telecoms devices, including routers, firewalls, and mobile network nodes.

This is a hands-on, office-based role for a researcher with extensive expertise in finding and demonstrating security vulnerabilities in embedded and networked systems.

The Role

· Vulnerability research against real-world network and embedded devices

· Reverse engineering firmware and binaries to discover security vulnerabilities

· Performing source code analysis to identify memory safety issues, logic flaws, and design weaknesses

· Designing and running fuzzing campaigns against protocols, services and interfaces, on both the target device and via emulation

· Working with a variety of CPU architectures such as ARM, MIPS, PowerPC and x86-64

· Providing technical leadership and setting research standards

· Investigating how individual vulnerabilities can be chained to maximise system compromise

· Developing and maintaining tools to improve personal and team productivity

· Producing clear, high-quality technical reports describing root cause and impact