Vulnerability Engineer

Role Overview

Responsible for the full lifecycle of vulnerability research, from discovery to detection to deployment. Focus on both hands‑on vulnerability research and building production‑grade tooling, with an emphasis on using LLMs to accelerate offensive security workflows.

Responsibilities

• Conduct security research across both 0‑days and n‑days, reverse‑engineering patches and performing patch‑diff analysis on source‑available and binary‑only targets.
• Build and maintain internal tooling for automated vulnerability discovery, exploit validation, and detection signature generation.
• Implement production‑grade, LLM‑powered workflows that accelerate vulnerability research.
• Prioritise high‑impact vulnerabilities that would materially affect clients, such as Remote Code Execution.
• Advocate for research visibility – support speaking engagements and conference presentations.

Qualifications

• 2+ years of real‑world vulnerability research experience.
• Proficiency in vulnerability research methodologies, including n‑day reproduction and patch diffing.
• Exposure to both web and binary vulnerability classes.
• Software engineering experience, with proficiency in Python.
• Comfort with common security tooling (Burp Suite, Ghidra/IDA, debuggers, fuzzers etc.).
• Interest in using LLMs to accelerate security workflows; prior experimentation preferred.
• Experience working in startups or high‑growth scale‑ups, adapting to ambiguity and rapid change.
• Proactive, collaborative, ownership‑driven mindset.
• Strong communication skills and willingness to share findings.
• Passion for continuous improvement and innovation.
• Ability to learn quickly and apply new concepts effectively.

Benefits

• Competitive compensation aligned with skills and ambition.
• Key, early‑contributor role in a fast‑growing cybersecurity business protecting large enterprises.
• Access to the best tools and powerful kit to fulfil your role effectively.
• Unlimited growth opportunities with promotion from within as we scale.
• Collaboration with cybersecurity experts on cutting‑edge industry challenges.

Equal Opportunity Employer

watchTowr is proud to be an Equal Opportunity Employer. We foster an inclusive, respectful, and diverse environment where every individual is recognised for their talent and potential. Our hiring decisions are guided by your capabilities, experience, and the qualities you bring to the role— not by unrelated personal attributes. We have a zero‑tolerance approach to any form of discrimination or harassment, and we actively encourage people from all backgrounds to apply.