Sr. Exploit Developer (US)

3 months, 4 weeks ago
Full-time
Senior
Software Development
VulnCheck

VulnCheck

VulnCheck offers cutting-edge vulnerability intelligence to outpace adversaries, empowering defenders with crucial insights to focus on critical vulnerabilities worldwide.

Internet Software & Services
11-50
Founded 2021

Description

  • Reverse engineer software to identify the root cause of vulnerabilities.
  • Author original exploits for initial access vulnerabilities when little or no public proof-of-concept code exists.
  • Implement detections such as Suricata and Snort signatures and YARA rules to identify exploitation on the wire.
  • Write attack surface management queries using tools such as Shodan, Census, FOFA, and ZoomEye to find vulnerable systems.
  • Contribute to local and other exploit development efforts beyond the initial access focus area.
  • Work on the open-source go-exploit framework.
  • Collaborate with a seasoned team of hackers and threat researchers on high-visibility security projects.
  • Conduct research and develop tools to improve vulnerability enrichment and mapping.

Requirements

  • Prior experience writing exploit code for RCE or initial access vulnerabilities that do not require authentication.
  • Background in reverse engineering and exploit development.
  • Experience working on technical projects remotely, independently, and on small teams.
  • Prior cybersecurity work experience at a vendor or in government is preferred.
  • Ability to share example exploit code written is preferred.
  • Must be able to meet U.S. export control, sanctions, and other applicable legal or contractual authorization requirements if needed.
  • 100% remote role, with priority given to candidates based in Massachusetts, Maryland, or Austin, TX.

Benefits

  • Unlimited PTO.
  • 401(k) plan with company match.
  • Comprehensive healthcare coverage.
  • Generous paid parental leave.
  • Remote-friendly work environment with flexibility.
  • Expense reimbursement for cell phone and internet.
  • Ongoing professional development, coaching, and learning resources.
  • Opportunities for career advancement within a fast-growing team.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Detection Engineer

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a Senior Detection Engineer to help build and operate detection engineering for its global cyber defense function across DoorDash, Deliveroo, and Wolt.

Go Python SIEM Snowflake SQL
1 day, 8 hours ago

Staff Security Engineer

Redox 51-250 Internet Software & Services

Redox is hiring a Staff Security Engineer to own cloud-native and application security for its remote healthcare data exchange platform, with a focus on hardening systems and driving secure-by-default engineering practices.

Argo CD AWS CI/CD CrowdStrike Docker GitHub Actions Go HashiCorp Vault Helm Kafka Kubernetes LLM Node.js PostgreSQL Python Redis Terraform TypeScript
1 day, 8 hours ago

Senior Information Security Engineer

KPA 251-1K Professional Services

KPA is hiring a Senior Information Security Engineer to own and improve its technical security platforms, cloud and identity security, and incident response efforts across a modern enterprise environment.

AWS AWS SES Azure CI/CD CrowdStrike DevSecOps Kubernetes Linux Network Security Penetration Testing PowerShell Python REST API SendGrid
1 day, 8 hours ago

IAM Architect - Saviynt

IDMWORKS 51-250 Professional Services

IDMWORKS is hiring an IAM Architect - Saviynt to design and deliver identity and access management solutions that strengthen security and support access control across enterprise environments.

Active Directory Cybersecurity OAuth SAML
1 day, 8 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers