VULNERABILITY CYBER ENGINEER

Up to £85,000 (Dependent on Experience) + Bonus + Shares + Staff Benefits

Fully Remote (UK)

SECURE has strategically partnered with a multi-award-winning, platform-based organisation at the forefront of pre-emptive exposure management. As a market leader backed by significant venture funding, they are expanding their offensive security capabilities, specifically by scaling an elite vulnerability research & engineering function across the globe.

Role Overview:

Step in as a hybrid threat hunter & tooling engineer. You will own the lifecycle from discovery to detection, conducting 0-Day / N-Day research whilst engineering the Python & LLM-powered tooling that automates exploit validation across global attack surfaces. By targeting critical, high-impact weaknesses, you ensure their clients neutralise vulnerabilities before adversaries strike.

Who Should Apply:

• The Hybrid Threat Hunter: You have a solid foundation reproducing N-Days & diffing patches, but you don't just want to write a report and throw a PoC over the wall. You want to write the code that automates the detection.
• The Automation-Obsessed Researcher: You know your way around Ghidra, Burp & Python, and you are actively experimenting with how AI & LLMs can exponentially speed up your triage, code review & exploit validation.

Skills & Experience of Vulnerability Engineer would include:

• Vulnerability Research (2+ Years): Practical real-world experience reproducing N-Days & performing patch diffing. You have a solid foundation and are ready to go much deeper.
• Web & Binary Fundamentals: Fluidity across vulnerability classes. You understand what a deserialization bug looks like and you aren't afraid of dropping into a debugger.
• Software Engineering: Proven prior experience writing & maintaining code, with a heavy emphasis on Python.
• Offensive Tooling: Hands-on exposure to the core ecosystem: Burp Suite, Ghidra / IDA, debuggers & fuzzers.
• AI / LLM Experimentation: Genuine interest and practical experimentation using LLMs for code review, triage or analysis, with a clear-eyed view of where they excel and where they fall short.
• Start-Up / Scale-Up Execution: A proactive, ownership-driven mindset capable of navigating ambiguity and fast-changing priorities within a high-growth, early-stage environment.

Responsibilities of Vulnerability Cyber Engineer:

• Hunt: Conduct relentless security research across both 0-Days & N-Days, reverse-engineering patches & performing analysis via patch diffing on source-available & binary-only targets.
• Engineer: Build & maintain robust internal tooling for automated vulnerability discovery, exploit validation & scalable detection signature generation.
• Innovate: Implement production-grade LLM-powered workflows that push the boundaries of offensive security and exponentially accelerate research output.
• Target: Focus exclusively on critical, high-impact weaknesses that matter (e.g. remote code execution) rather than generating low-level informational noise (e.g. weak SSL ciphers).
• Evangelize: Present your original research to the global cyber security community at top-tier conferences, fully supported and sponsored by the business.

At SECURE, we value attitude and aptitude over certifications. If you possess the drive and relevant experience to deliver tangible results aligned with our clients' needs, reach out. We embrace DE&I and welcome applications from underrepresented groups, minorities, women in cybersecurity, neurodiverse individuals, LGBTQ+ community members, veterans, and those from diverse socioeconomic backgrounds.