Senior Vulnerability Research (VR) Security Analyst in Birmingham, West Midlands

Our client is looking for a Senior Vulnerability Research (VR) Security Analyst to join their expanding team, the role is permanent and is located in Birmingham, United kingdom.

Our client aims to become world leading in vulnerability research, so this is an opportunity to be part of a capability that will grow and develop. Our client will need ongoing capabilities to ensure that telecoms security evaluations remain leading edge, e.g., through the application of new techniques, bespoke security tool prototyping, test device development. The Senior VR Security Analyst will therefore require a focus on consistent learning and development of both self and the team. The role will have the opportunity to develop and encourage a wider network of VR specialists across the telecoms industry to support wider knowledge sharing and skills development.

About you:

Examples of technical skills, knowledge, and experience, including:

• Experience in multiple VR roles and/or organisations.
• An interest and aptitude for vulnerability research (either from a professional background or by demonstrating an aptitude).
• A passion for understanding how things work, testing them, pushing them to their limits, and finding security issues in them.
• Understanding of hardware and software development lifecycles and their impact on security practices.
• Applied knowledge of cryptographic algorithms / standards and knowledge of data structures and distributed systems.
• Understanding of network protocols and how software works from assembly through to interpreted languages, and everything in between.
• Familiarity with vulnerabilities such as memory corruption bugs (stack/heap/integer overflows, format strings), and techniques attackers can use to bypass common security protections (e.g., NX, stack canaries, heap protection, ASLR, etc.)
• Knowledge and experience of embedded systems and operating systems, and hardware techniques for prototyping and debugging these.
• Knowledge of Linux OS internals. Ability to self-learn any language, given appropriate resources to study and practice.
• Practical knowledge of common white-hat exploitation toolsets and techniques for common flaws in low-level software, as well as web platforms (e.g., SQL injection, XSS, CSRF, SSRF, upload/download abuse, RCE).
• Reverse engineering experience (e.g., IDA Pro, Ghidra).
• Experience using debuggers such as GDB.

This role requires you to have SC clearance or to be eligible to obtain SC clearance.

Disclaimer:

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.