Vulnerability Researcher - Global (All Levels)

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.
 
At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future.
 
AI Fearlessly.

Location: This role can be based anywhere globally, with preferred locations in Canada, USA, Tel Aviv, or Australia.

Position Summary:

TrendAI is seeking a Vulnerability Researcher to join our team of security researchers here in the Zero Day Initiative. The Zero Day Initiative is radically changing the enterprise security landscape with its unique brand of industry-leading vulnerability research. The Vulnerability Researcher role will leverage the intelligence coming in from a globally distributed network of vulnerability researchers to deliver actionable guidance to the product teams inside of TrendAI. This role produces the intelligence that ensures that TrendAI products can detect and block zero-day threats to an enterprise.  It will also support the sales and marketing teams within TrendAI through the publication of research, white papers, and blogs that will be presented at top security conferences and tradeshows around the world.

If you enjoy analyzing, finding and exploiting vulnerabilities, researching exploit techniques and mitigations, and building systems to streamline reverse engineering analysis tasks then we'd love to hear from you.

We're primarily seeking experienced Senior, Staff, and Principal-level researchers. The ideal candidate will have deep technical expertise and the ability to operate at a Staff level or above. We are also open to exceptional Senior Vulnerability Researchers who demonstrate the potential to grow into a Staff or Principal role.

Responsibilities:

• Research newly discovered vulnerabilities in a wide range of software products

• Reverse engineer and research network protocols, file formats, and software

• Develop and verify proof-of-concept files and exploit code

• Produce reports describing software vulnerabilities and detection of attack vectors

• Monitor security industry publications, news groups and other online sources for newly discovered security vulnerabilities and emerging threats

• Implement new and improve existing tools to automate and streamline the vulnerability research process

• Collaborate with other vulnerability researchers on research, analysis and report production

Required Knowledge:

• Functional understanding of TCP/IP protocol stack and higher-level networking protocols (wire-level protocols, RF communications, BGP, routing protocols, or others).

• Experience in static and dynamic reverse engineering binaries ((x86, x64, ARM, PPC, MIPS, SPARC, 68k, or others)

• Knowledge in a variety of operating systems internals

Required Skills & Abilities:

• Ability to analyze and describe vulnerabilities and attack methods

• Familiarity with tools such as IDA Pro, Ghidra, Binary Ninja, WinDbg, gdb, LLDB, and Wireshark

• At least two of C/C++, assembly language, Java, Python, and .NET

• Ability to produce reliable exploits for a wide range of vulnerabilities.

• Understanding of exploit mitigations such as DEP and ASLR

• Excellent oral and written communication skills

•  Reliable and dependable team player

• Great attention to detail and personal quality assurance

• Self-directed, self-motivated with the ability to work with minimal supervision

Professional Designation/Certification:

• Bachelor's or Master's degree in computer science or a related field preferred but not required.

Experience:

• Industry experience performing similar technical role preferred but not required