Principal Vulnerability Researcher

Raytheon UK’s Cyber Research Group (CRG) is seeking a highly skilled and analytically driven Principal Vulnerability Researcher to support advanced research and development initiatives. As Principal Vulnerability Researcher, you will conduct in-depth technical investigations across hardware and software systems to identify security vulnerabilities, develop bespoke tools, and contribute to the discovery and analysis of emerging threats. This role requires a strong technical foundation, problem-solving ability, and the capacity to work collaboratively within multidisciplinary teams. You will be based at our Gloucester site, working in a hybrid capacity. You must be eligible and willing to gain SC and enhanced DV clearance.

Key Responsibilities

• Perform hardware and software teardowns, characterisation, and reverse engineering.
• Conduct detailed analysis of platforms to identify security weaknesses, bugs, and potential exploits.
• Examine network protocols and system behaviours to uncover vulnerabilities.
• Collaborate with cross-functional teams to deliver innovative technical solutions and research outcomes.
• Produce clear, structured documentation of findings, methodologies, and recommendations for both internal and external stakeholders.
• Lead teams of researchers and report to customers.
• Assist with business development activities and winning new work.

Required Skills And Experience

• Proficiency in at least one programming language (C, C++, Python).
• Familiarity with assembly language (reading or writing).
• Experience in reverse engineering using tools such as IDA Pro, Ghidra, or Binary Ninja.
• Strong knowledge of Linux-based systems, including command-line tools and system configuration.
• Demonstrated analytical and problem-solving skills, with a methodical and inquisitive approach to technical challenges.
• Solid understanding of network protocols.
• Ability to rapidly learn and adapt to new technologies and domains.

Desirable Experience

• Proven track record of identifying, analysing, and reporting vulnerabilities in complex systems.
• Experience using or developing fuzzers.
• Practical experience emulating hardware platforms with QEMU or similar tools to support security research and analysis.
• Embedded software development for platforms such as ARM Cortex, AVR, or MIPS.
• Familiarity with Radio Frequency (RF) systems and Software Defined Radios (SDRs), including 2G/4G/5G technologies and tools such as GNU Radio, Osmocom, srsRAN, or USRP.
• Network engineering experience (professional or home lab).
• Hardware development and prototyping, including PCB design and microcontroller programming.

Benefits And Work Culture

• 37hr working week with early finish Fridays – start your weekend early!
• An informal, flexible working culture that is output focused.
• 25 days holiday + statutory public holidays, plus opportunity to buy and sell up to 5 days and up to 5 paid days volunteering.
• 10.5% company pension contribution with 6% employee contribution.
• Annual company bonus scheme (discretionary).
• Private Medical Insurance (grade dependent).
• 6 times salary Life Assurance with pension.
• Flexible Benefits scheme with extensive salary sacrifice schemes, including Health Cashplan, Dental, and Cycle to Work, amongst others.
• Enhanced sick pay.
• Enhanced family friendly policies including enhanced maternity, paternity.

RTX Raytheon UK is a landed company and part of the wider RTX organisation. Headquartered in Arlington, Virginia, USA, but with over 180,000 employees globally across every continent, RTX provides advanced systems and services for commercial, military and government customers worldwide and comprises three industry-leading businesses – Collins Aerospace Systems, Pratt.