Successful candidates will get to have a unique experience working on or supporting the latest ground-breaking cyber security and networking technologies on a national and international scale. This opportunity will allow those involved to have first-hand exposure to the latest technologies via the research and development that we are undertaking to secure our telecommunications networks, in order to keep the UK the safest place to live and do business online.
This role will be part of a small team of Vulnerability Researchers, tackling some of the most interesting cyber problems with a meaningful and tangible impact on the national security of the UK. You will be instrumental in standing up an industry-leading security facility.
The focus of this role will be to conduct in-depth Vulnerability Research activities, explore boundaries of technology and its development, test hypotheses, and conduct deep dives into the vulnerabilities of telecoms equipment. You will also develop bespoke leading-edge security testing tools to support these activities.
Successful Applicants must be able to commute to the UKTL offices in Solihull, Birmingham with the possibility of hybrid working.
We strive to offer a great work-life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in.
Minimum Requirements:
1. An interest and aptitude for vulnerability research (either from a professional background or by demonstrating an aptitude).
2. A passion for understanding how things work, testing them, pushing them to their limits, and finding security issues in them.
3. An understanding of hardware and software development lifecycles and their impact on security practices.
4. Applied knowledge of cryptographic algorithms (encryption, authentication, signatures, etc).
5. Knowledge of data structures, distributed systems, virtualization and containerization technologies.
6. An understanding of network protocols and how software works from assembly through to interpreted languages, and everything in between.
7. Familiarity with vulnerabilities such as memory corruption bugs (stack/heap/integer overflows, format strings), and techniques attackers can use to bypass common security protections (e.g. NX, stack canaries, heap protection, ASLR, etc.).
8. Knowledge and experience of embedded systems and operating systems, and hardware techniques for prototyping and debugging these.
9. Knowledge of Linux OS internals.
10. Ability to self-learn any language, given appropriate resources to study and practice.
11. Practical knowledge of common white-hat exploitation toolsets and techniques for common flaws in low-level software, as well as web platforms (e.g. SQL injection, XSS, CSRF, SSRF, upload/download abuse, RCE).
12. Reverse engineering experience (e.g. IDA Pro, Ghidra).
Please note: Applications will be reviewed, and interviews conducted throughout the duration of this advert therefore we may at any time bring the closing date forward. We encourage all interested applicants to apply as soon as practical.
We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to have a DV clearance with no restrictions, or you must have the ability to obtain a DV clearance.
#J-18808-Ljbffr