Experienced Vulnerability Researcher in London

Breakpoint Research builds novel, mission-critical offensive cyber capabilities to strengthen and advance democracy. We're hiring experienced vulnerability researchers to join our team, alongside some of the best in the industry.

What you’ll be doing:

• Vulnerability research across mobile, operating systems, firmware, and embedded systems.
• Reliable exploit development that demonstrates real mission impact.
• Low-level engineering for the hardest customer problems.

How we work:

VRED is a tough game. We are relentlessly curious, unafraid to try new things, and we own our failures alongside our wins. We act with honesty, integrity, humility, and kindness. The capabilities we've built came from a culture of deep collaboration, and we work hard to keep it that way.

About you:

We're especially keen to hear from researchers who've taken work through to deployable products or capabilities, but it's not a requirement. You're comfortable working low-level (kernels, firmware, embedded systems, or similar), with strong reverse engineering skills alongside a fluent toolkit: C/C++, assembly (i.e. ARM/AArch64), fuzzing, static and dynamic analysis, exploit primitive development, modern mitigation bypass.

You take pride in the quality of your work and push yourself and others to make it better. You approach VR as a team sport — sharing what you know, asking when you don't, and picking teammates up when they get knocked down. Much of the best work in this field can't be talked about publicly, and a track record without public artefacts is no obstacle for us. We are also open to candidates with non-traditional backgrounds.

Nice to have:

• Experience leading technical projects or mentoring researchers.
• Depth in platforms relevant to our work: mobile (Android/iOS), browsers, hypervisors, embedded RTOS, kernel internals.
• Public research, CVEs, or conference talks.

Where you'll work:

Remote, globally. We consider applicants from any country and any background. The team works in English, so you'll need to be fluent. We have a particular interest in UK-based candidates; holding or being eligible for Developed Vetting is a positive but not a requirement.

What we offer:

• Salaries are benchmarked for each local market we hire from — whether UK, US, Australia, or elsewhere. Come to us with your expectations.
• 25 days annual leave plus your local public, bank, or federal holidays. We expect everyone to take it.
• Bonus scheme — when the business does well, everyone shares in it.
• Training and conference budgets — go to the cons that matter, wherever they're happening.
• Employee assistance program giving you and your immediate family confidential access to counselling, mental health support, and financial and legal advice.
• Regular get-togethers — seasonal parties, technical workshops, and an annual offsite that brings the whole team into one place.

Plus, depending on where you're based:

• UK: Annual leave rises by 1 day per year up to 28 days, 6% matched pension, Private medical insurance, 4x death in service, Cycle-to-work scheme.
• USA: Matched 401(k) up to 4%, Healthcare, dental, and vision cover.
• Australia: Minimum 12% superannuation.
• For candidates elsewhere in the world, we'll put together a package matched to your local market.

Breakpoint Research is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We aim to respond to all candidates via email within a week of their application. Please note that emails may go to your spam or junk folder.