Vulnerability Researcher - Global (All Levels)

Trend Micro

2d•Remote

About The Position

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk. At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future. AI Fearlessly. TrendAI is seeking a Vulnerability Researcher to join our team of security researchers here in the Zero Day Initiative. The Zero Day Initiative is radically changing the enterprise security landscape with its unique brand of industry-leading vulnerability research. The Vulnerability Researcher role will leverage the intelligence coming in from a globally distributed network of vulnerability researchers to deliver actionable guidance to the product teams inside of TrendAI. This role produces the intelligence that ensures that TrendAI products can detect and block zero-day threats to an enterprise. It will also support the sales and marketing teams within TrendAI through the publication of research, white papers, and blogs that will be presented at top security conferences and tradeshows around the world. If you enjoy analyzing, finding and exploiting vulnerabilities, researching exploit techniques and mitigations, and building systems to streamline reverse engineering analysis tasks then we'd love to hear from you. We're primarily seeking experienced Senior, Staff, and Principal-level researchers. The ideal candidate will have deep technical expertise and the ability to operate at a Staff level or above. We are also open to exceptional Senior Vulnerability Researchers who demonstrate the potential to grow into a Staff or Principal role.

Requirements

Functional understanding of TCP/IP protocol stack and higher-level networking protocols (wire-level protocols, RF communications, BGP, routing protocols, or others).
Experience in static and dynamic reverse engineering binaries ((x86, x64, ARM, PPC, MIPS, SPARC, 68k, or others)
Knowledge in a variety of operating systems internals
Ability to analyze and describe vulnerabilities and attack methods
Familiarity with tools such as IDA Pro, Ghidra, Binary Ninja, WinDbg, gdb, LLDB, and Wireshark
At least two of C/C++, assembly language, Java, Python, and .NET
Ability to produce reliable exploits for a wide range of vulnerabilities.
Understanding of exploit mitigations such as DEP and ASLR
Excellent oral and written communication skills
Reliable and dependable team player
Great attention to detail and personal quality assurance
Self-directed, self-motivated with the ability to work with minimal supervision

Nice To Haves

Bachelor's or Master's degree in computer science or a related field preferred but not required.
Industry experience performing similar technical role preferred but not required.

Responsibilities

Research newly discovered vulnerabilities in a wide range of software products
Reverse engineer and research network protocols, file formats, and software
Develop and verify proof-of-concept files and exploit code
Produce reports describing software vulnerabilities and detection of attack vectors
Monitor security industry publications, news groups and other online sources for newly discovered security vulnerabilities and emerging threats
Implement new and improve existing tools to automate and streamline the vulnerability research process
Collaborate with other vulnerability researchers on research, analysis and report production