About this role
Salary: £43,000 - 72,000 per year
Requirements
- Proficiency in at least one programming language, such as C, C++ or Python
- Familiarity with reading or writing assembly language
- Experience with reverse-engineering tools such as IDA Pro, Ghidra or Binary Ninja
- Strong knowledge of Linux-based systems, including command-line tools and system configuration
- Strong analytical and problem-solving skills, with a methodical and inquisitive approach
- Solid understanding of network protocols
- Ability to learn quickly and adapt to new technologies and domains
- Track record of identifying, analysing and reporting vulnerabilities in complex systems
- Desirable: Experience using or developing fuzzers
- Desirable: Practical experience emulating hardware platforms with QEMU or similar tools
- Desirable: Embedded software development experience with platforms such as ARM Cortex, AVR or MIPS
- Desirable: Familiarity with RF systems and SDRs, including 2G/4G/5G technologies and tools such as GNU Radio, Osmocom, srsRAN or USRP
- Desirable: Network engineering experience, whether professional or through a home lab
- Desirable: Hardware development and prototyping experience, including PCB design and microcontroller programming
Responsibilities
- Perform hardware and software teardowns, characterisation and reverse engineering
- Analyse platforms to identify security weaknesses, bugs and potential exploits
- Examine network protocols and system behaviours to uncover vulnerabilities
- Collaborate with cross-functional teams to deliver technical solutions and research outcomes
- Document findings, methodologies and recommendations clearly for internal and external stakeholders
- Support business development through proposal writing and technical briefings
Technologies
- ARM
- Embedded
- GNU
- Hardware
- Support
- Linux
- Network
- Python
- QEMU
- Security
- C++
More
We are seeking a Principal Vulnerability Researcher to join our Cyber Research Group, supporting advanced research and development in the defence and cybersecurity sector. The role involves in-depth technical investigations across hardware and software systems, developing bespoke tools, and contributing to the discovery and analysis of emerging threats. It is hybrid, with three days a week in our Gloucester office or at customer sites. We offer a competitive salary, annual bonus, market-leading pension, life assurance, 25 days holiday plus bank holidays, and a range of additional flexible benefits.
last updated 44 week of 2026