Sr. Vulnerability Researcher

Dew Software, a leader in the Digital Transformation space, is seeking a highly skilled Sr. Vulnerability Researcher to join their growing team. With a global presence and collaborative partnerships with Fortune 500 companies, Dew Software is at the forefront of cutting-edge technologies and innovative solutions. Operating across 14 development centers in 9 countries, Dew Software leverages diverse talent and expertise to drive strategic objectives and achieve exceptional outcomes for their clients. As a Sr. Vulnerability Researcher, you will have the opportunity to work on challenging projects, contributing to the development and enhancement of security measures and solutions.

Responsibilities

• Conduct in-depth vulnerability research and analysis to identify and exploit security weaknesses in software applications, operating systems, and network infrastructure.
• Design and develop Proof of Concepts (PoCs) to demonstrate vulnerabilities and their impact.
• Collaborate with cross-functional teams to provide recommendations and mitigation strategies to address identified vulnerabilities.
• Stay up to date with the latest security research and industry trends to anticipate emerging threats and develop proactive solutions.
• Contribute to the development of tools and methodologies to streamline vulnerability research and analysis processes.
• Document and communicate research findings to technical and non-technical stakeholders.

Requirements

• Bachelor’s degree in computer science, computer engineer
• 5+ years of related experience
• Extensive experience working with disassemblers such as IDA Pro, Binary Ninja, radare2, or Ghidra.
• Proficiency in advanced fuzzing concepts, including Coverage-guided, Fuzzing Workflow, and Crash Analysis.
• Mastery of fuzzing tools such as LibFuzzer, AFL++, or Honggfuzz. In-depth understanding of ARM assembly languages.
• Proficiency in advanced testing techniques such as Symbolic Execution, Concolic Execution, or Differential Fuzzing.
• Comprehensive experience using Qemu.
• Proven expertise in analyzing crash reports for debugging or identifying vulnerabilities.