Sr. Vulnerability Researcher - Global

Trend Micro

1d•Remote

About The Position

TrendAI is seeking a Sr. Vulnerability Researcher to join the Zero Day Initiative team. This role involves leveraging intelligence from a global network of vulnerability researchers to provide actionable guidance to TrendAI product teams. The position is crucial for detecting and blocking zero-day threats and will also support sales and marketing through research publications, white papers, and blogs presented at international security conferences. The ideal candidate enjoys analyzing, finding, and exploiting vulnerabilities, researching exploit techniques and mitigations, and building systems for reverse engineering analysis.

Requirements

Functional understanding of TCP/IP protocol stack and higher-level networking protocols (wire-level protocols, RF communications, BGP, routing protocols, or others).
Experience in static and dynamic reverse engineering binaries ((x86, x64, ARM, PPC, MIPS, SPARC, 68k, or others)
Knowledge in a variety of operating systems internals
Ability to analyze and describe vulnerabilities and attack methods
Familiarity with tools such as IDA Pro, Ghidra, Binary Ninja, WinDbg, gdb, LLDB, and Wireshark
At least two of C/C++, assembly language, Java, Python, and .NET
Ability to produce reliable exploits for a wide range of vulnerabilities.
Understanding of exploit mitigations such as DEP and ASLR
Excellent oral and written communication skills
Reliable and dependable team player
Great attention to detail and personal quality assurance
Self-directed, self-motivated with the ability to work with minimal supervision

Nice To Haves

Bachelor's or Master's degree in computer science or a related field preferred but not required.
Industry experience performing similar technical role preferred but not required.

Responsibilities

Research newly discovered vulnerabilities in a wide range of software products
Reverse engineer and research network protocols, file formats, and software
Develop and verify proof-of-concept files and exploit code
Produce reports describing software vulnerabilities and detection of attack vectors
Monitor security industry publications, news groups and other online sources for newly discovered security vulnerabilities and emerging threats
Implement new and improve existing tools to automate and streamline the vulnerability research process
Collaborate with other vulnerability researchers on research, analysis and report production