Vulnerability Researchers / Security Researchers

About you You are a hands-on Vulnerability Researcher or Security Researcher with experience discovering, analyzing, and exploiting vulnerabilities in complex systems. You have a strong understanding of reverse engineering, OS internals, and modern exploitation techniques, and can develop exploits, proof-of-concept code, and research tools to validate your findings. You are proactive, technically curious, and able to conduct vulnerability research independently in a full-time remote environment. About the project We are a Barcelona-based R&D center looking for Vulnerability Researchers / Security Researchers to join our team. The role focuses on hands-on vulnerability research, including finding and exploiting vulnerabilities in complex systems such as browsers, kernels, mobile and desktop operating systems. We offer full-time remote work as well as relocation opportunities to Barcelona. Flexible working hours are supported depending on productivity and time zones. Your area of responsibility - Detect, analyze, and exploit vulnerabilities; - Conduct vulnerability research across browsers, kernels, mobile and desktop operating systems, and other complex software; - Understand the technical details of vulnerabilities and assess their real impact; - Develop exploits, proof-of-concept code, scripts, and software modules to validate vulnerabilities; - Perform reverse engineering and binary analysis as part of vulnerability research; - Reverse-engineer security patches to better understand vulnerabilities; - Use fuzzing and other research techniques to discover vulnerabilities; - Effectively communicate vulnerability findings and their technical impact; - Assist in the development of tools for vulnerability and security research. Skills and requirements - Proven hands-on experience in vulnerability research and vulnerability exploitation; - Experience in exploit development; - Experience in finding vulnerabilities in complex systems; - Experience with reverse engineering; - Knowledge of OS internals; - Knowledge of modern exploitation techniques; - Experience researching at least one of the following areas: browsers, kernels, mobile OSes, desktop OSes, or embedded systems; - Experience with platforms such as Windows, Linux, macOS, iOS, or Android; - Ability to work independently in a remote environment; - Availability for full-time work. Will be a plus - Published CVEs or other proven records of discovered vulnerabilities; - Experience finding and exploiting vulnerabilities in browsers or OS kernels; - Experience with fuzzing; - Participation in CTFs, security competitions, or security conferences; - Bug bounty or independent vulnerability research experience; - Published security research, technical write-ups, PoCs, or research tools; - Offensive security background; - Academic degree in Computer Science, Mathematics, or Physics. We offer - A real opportunity to influence the product, architecture, and technical decisions; - Direct communication with C-level management, without unnecessary bureaucracy; - Remote-first environment; - Long-term and enjoyable cooperation; - Paid annual vacation and paid sick leave; - Official public holidays as days off; - Personal legal support; - English classes; - Team-building events and a friendly, supportive atmosphere.