Senior Vulnerability Researcher
On-siteTel Aviv, Tel Aviv, Israel
Tel Aviv, Tel Aviv, IsraelOn-siteFull TimeSenior LevelSmall
Full TimeSenior LevelSmall
Job Summary
Hunt for flaws in established security paradigms by reverse-engineering systems, protocols, and architectures to uncover novel vulnerabilities and exploitation techniques. Develop hypotheses into working proof-of-concept exploits that demonstrate real-world risk before attackers do. Own research threads end-to-end, from early exploration through responsible disclosure or publication, grounding findings in attacker reality. Promote Oak's standing in the security community through original research, CVEs, and technical thought leadership.
Required Qualifications
- 6+ years of hands-on vulnerability research, reverse engineering, or offensive security
- A proven track record of finding non-trivial flaws
- Depth in systems, protocols, and architectures to understand precisely why they exist
- A first-principles approach to how things actually work, not how they're documented to work
- The instinct and ability to see what others overlook - the unquestioned assumptions in established systems, the edges no one has tested, the failure modes that live in the gap between spec and implementation
- End-to-end ownership of research: driving hypotheses to conclusions through dead ends, changes of directions and reaching hard proofs
- Strong hands-on expertise, converting theories and research into a working chain and proof of concept
- Result driven depth: going as far as a problem deserves because the result is worth it, and knowing when it is
- A track record of original significant discoveries - published CVEs, novel vulnerability classes or exploitation techniques, research that named a problem the field didn't have words for yet
Desired Qualifications
- History of presenting original research at Black Hat, DEFCON, OffensiveCon, Hexacon or a comparable security conference
- Significant CVEs (CVSS High or Critical) under your name
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.