[Hiring] Vulnerability Researcher @Trend Micro

Role Description

TrendAI is seeking a Vulnerability Researcher to join our team of security researchers here in the Zero Day Initiative. The Vulnerability Researcher role will leverage the intelligence coming in from a globally distributed network of vulnerability researchers to deliver actionable guidance to the product teams inside of TrendAI. This role produces the intelligence that ensures that TrendAI products can detect and block zero-day threats to an enterprise. It will also support the sales and marketing teams within TrendAI through the publication of research, white papers, and blogs that will be presented at top security conferences and tradeshows around the world.

If you enjoy analyzing, finding and exploiting vulnerabilities, researching exploit techniques and mitigations, and building systems to streamline reverse engineering analysis tasks then we'd love to hear from you.

We're primarily seeking experienced Senior, Staff, and Principal-level researchers. The ideal candidate will have deep technical expertise and the ability to operate at a Staff level or above. We are also open to exceptional Senior Vulnerability Researchers who demonstrate the potential to grow into a Staff or Principal role.

Responsibilities

• Research newly discovered vulnerabilities in a wide range of software products
• Reverse engineer and research network protocols, file formats, and software
• Develop and verify proof-of-concept files and exploit code
• Produce reports describing software vulnerabilities and detection of attack vectors
• Monitor security industry publications, news groups and other online sources for newly discovered security vulnerabilities and emerging threats
• Implement new and improve existing tools to automate and streamline the vulnerability research process
• Collaborate with other vulnerability researchers on research, analysis and report production

Required Knowledge

• Functional understanding of TCP/IP protocol stack and higher-level networking protocols (wire-level protocols, RF communications, BGP, routing protocols, or others)
• Experience in static and dynamic reverse engineering binaries (x86, x64, ARM, PPC, MIPS, SPARC, 68k, or others)
• Knowledge in a variety of operating systems internals

Required Skills & Abilities

• Ability to analyze and describe vulnerabilities and attack methods
• Familiarity with tools such as IDA Pro, Ghidra, Binary Ninja, WinDbg, gdb, LLDB, and Wireshark
• At least two of C/C++, assembly language, Java, Python, and .NET
• Ability to produce reliable exploits for a wide range of vulnerabilities
• Understanding of exploit mitigations such as DEP and ASLR
• Excellent oral and written communication skills
• Reliable and dependable team player
• Great attention to detail and personal quality assurance
• Self-directed, self-motivated with the ability to work with minimal supervision

Professional Designation/Certification

• Bachelor's or Master's degree in computer science or a related field preferred but not required

Experience

• Industry experience performing similar technical role preferred but not required

Benefits

• Competitive pay with company performance-based bonus
• Strong benefits for you and your family
• Real opportunities to grow your skills across cutting-edge technology
• Work-life balance, team connection, and a culture that's genuinely inclusive and collaborative