vulnerability researcher

Confidential Government

<div>
 <p>
  We are seeking a Vulnerability Management Consultant to manage the end-to-end lifecycle of discovering and remediating technical security flaws.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Role Overview:
 </p>
 <p>
  A methodical leadership role focused on attack surface reduction across a diverse enterprise landscape.
 </p>
 <p>
  Core Purpose: To drastically reduce the organizational attack surface by ensuring critical flaws are identified and closed efficiently.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Key Responsibilities:
 </p>
 <ul>
  <li>
   Oversee global vulnerability scanning across infrastructure, applications, and hybrid cloud assets.
  </li>
  <li>
   Implement a risk-based prioritization model that accounts for threat intelligence and business context.
  </li>
  <li>
   Coordinate patching and remediation efforts with cross-functional IT operations teams.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Qualifications:
 </p>
 <ul>
  <li>
   Bachelor's degree in Information Technology or Computer Science.
  </li>
  <li>
   5+ years of experience in Vulnerability Management or Systems Administration.
  </li>
  <li>
   Certifications: GEVA or CISSP.
  </li>
  <li>
   Competencies: Expert proficiency in Qualys, Tenable, or Rapid7 and strong project management skills.
  </li>
 </ul>
 <p>
 </p>
</div>


Vulnerability Management Consultant

Apple

<p>Apple's Security Engineering &amp; Architecture organization is responsible for the security of all Apple products. Passionate about safeguarding our users, we take an offensive approach to defense - finding and fixing vulnerabilities before they can be exploited. When it comes to securing more than a billion devices running the world's most sophisticated operating systems, that means finding vulnerabilities first.<br>
<br>
Can you make a difference on this scale? Join our extraordinary team of security researchers and help protect all Apple users.<br>
<br>
<b>Description</b><br>
<br>
We engage in various activities, including vulnerability research, binary exploitation, security tooling development, fuzzing, machine learning, and many more. By developing and harnessing state-of-the-art technologies, we amplify our impact on Apple's product security.<br>
<br>
In this role, your primary focus will be on the kernel and embedded layers of Apple platforms. You will conduct offensive security research across operating system kernels, boot ROMs, firmware, secure enclaves, and other low-level components that form the foundation of our security architecture. You will work in cross-functional teams alongside other researchers and engineering teams to evaluate and strengthen the most privileged layers of our products.<br>
<br>
This job is for individuals with outstanding technical skills, grit, and a genuine passion for breaking systems - so we can build them stronger.<br>
<br>
If this is you, we'd love to hear from you.<br>
<br>
In-office roles in Paris, Cupertino, and other locations. Remote considered for experienced candidates.<br>
<br>
<b>Preferred Qualifications</b><br>
<br>
Deep knowledge of kernel internals, including virtual memory management, system call interfaces, and driver frameworks<br>
<br>
Experience with firmware and boot ROM security analysis, including secure boot chains and hardware trust anchors<br>
<br>
Familiarity with embedded processors and coprocessors security (e.g., Secure Enclave, DMA-capable peripherals, baseband)<br>
<br>
Fluency with tool development, using programming languages such as C, C++, Python, Swift, or Objective-C<br>
<br>
Experience with reverse-engineering techniques and tools like IDA or Ghidra<br>
<br>
Knowledge of Apple operating systems like iOS or macOS is nice-to-have, but not required<br>
<br>
<b>Minimum Qualifications</b><br>
<br>
Proven experience in vulnerability research targeting operating system kernels, firmware, or embedded components<br>
<br>
Strong understanding of low-level vulnerability classes and exploitation techniques, such as memory corruption, race conditions, and use-after-free<br>
<br>
Ability to apply AI techniques and tools, such as LLMs or Machine Learning, for security research<br>
<br>
Outstanding collaboration skills<br>
<br>
<b>Pay &amp; Benefits</b><br>
<br>
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $147,400 and $272,100, and your base pay will depend on your skills, qualifications, experience, and location.<br>
<br>
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits<br>
<br>
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.</p>

Offensive Security Researcher, Kernel & Embedded Security

Magnatec Systems Private Limited

<p><b>About the Role</b></p><p>We are hiring a hands-on penetration testing engineer to conduct security assessments across our web applications, mobile platforms, and APIs. We expect deep manual testing &mdash; not scanner-only work &mdash; strong methodology, and clear reporting at every phase.</p><p><b>Key Responsibilities</b></p><p><b>Web &amp; Mobile Application \ Api Security Testing</b></p><ul><li>Manual black-box and grey-box testing following OWASP Top 10</li><li>Test for SQLi, XSS, CSRF, IDOR, SSRF, Broken Authentication, and Access Control flaws</li><li>Assess session management, cookies, HTTP headers, and client-side JavaScript logic</li><li>Static and dynamic assessment of Android and iOS apps following OWASP MASVS</li><li>APK/IPA reverse engineering, hardcoded secrets detection, insecure local storage</li><li>SSL pinning bypass, MitM traffic interception, runtime instrumentation</li><li>Biometric bypass, session token handling</li><li>Test REST endpoints against OWASP API Security Top 10</li><li>Focus on BOLA, JWT abuse, OAuth 2.0 flaws, mass assignment, and rate limiting gaps</li></ul><p><b>Reporting</b></p><ul><li>CVSS-scored findings with reproduction steps and proof-of-concept screenshots</li><li>Executive summary for management and full technical report for developers</li><li>Prioritised remediation roadmap and re-testing after fixes</li></ul><p><b>Requirements</b></p><p><b>Must Have</b></p><ul><li>3+ years hands-on penetration testing &mdash; web and mobile focus</li><li>Strong knowledge of OWASP Top 10, OWASP MASVS, OWASP API Security Top 10</li><li>Android and iOS hands-on testing experience</li><li>Professional report writing for both technical and non-technical audiences</li></ul><p><b>Nice to Have</b></p><p><b>Essential Tools</b></p><p>Burp Suite Pro, OWASP ZAP, SQLMap, Nikto, Gobuster,MobSF, jadx, apktool, Frida, Objection, ADB, Charles Proxy,Postman, jwt_tool, InQL,</p><p>Work Location: In person</p>

Penetration Tester

U.S. Financial Technology

<div>OVERVIEW:<div></div><div><b><br>
The Company</b></div><div></div><div><br>
U.S. Financial Technology (U.S. FinTech) is seeking an experienced Lead, Security Engineer Vulnerability and Configuration Management to join our team of talented professionals. This is a full-time remote opportunity.</div><div></div><div><br>
U.S. FinTech built and operates the largest and most advanced mortgage securitization platform in the world, supporting the Uniform Mortgage-Backed Security (UMBS) of Fannie Mae and Freddie Mac.</div><div></div><div><br>
Supporting 70% of the mortgage-backed securities in the market, U.S. FinTech provides best-in-class single-family issuance, bond administration, disclosure, and tax services. We support a broad portfolio of products for our clients with full lifecycle management.</div><div></div><div><br>
Our market-leading, cloud-based, end-to-end platform executes transactions on an extraordinary scale which has bolstered liquidity in the secondary mortgage market, one of the largest and most important financial markets in the world. Our unique approach to securitization combines the best minds in financial services with the know-how, flexibility, and innovation of leading technologists.</div>
RESPONSIBILITIES :<p></p><p><b><br>
Job Information</b></p><div><br>
The Lead Vulnerability and Compliance Analyst main responsibilities would be to act as a Subject Matter Expert for all programs within the VCM space. This would include conducting comprehensive vulnerability assessments using tools such as Wiz and Tenable. Leverage strong analytical and problem-solving skills to identify weaknesses in US FinTech&rsquo;s IT Infrastructure. Communicate findings effectively, via reports/meetings to prioritize vulnerability remediation. Utilize the developed processes to track, prioritize, and ensure remediation of found vulnerability and compliance issues. Continuous monitor US FinTech infrastructure for Vulnerability and Compliance related issues. Make Improvements to monitors, scans, dashboards, and reporting. Ability to work independently and in a team environment, collaborate effectively with other InfoSec Teams and IT Infrastructure teams. Eager to learn and adapt to emerging cloud technologies and tools in a fast-paced environment.</div><p><b><br>
Key Job Functions</b></p><ul><li>
Vulnerability Assessment</li><li>
Act as a Subject Matter Expert for the VCM program, processes, and tooling.</li><li>
Configure, tune, and maintain vulnerability management tools</li><li>
Work with Security Architecture on new build outs, new business, new technologies, new environments to ensure coverage of VCM programs, processes, and tooling.</li><li>
Build out new Security baselines for CIS, DISA STIG, and custom baselines.</li><li>
Correlate Vulnerabilities with threat intelligence to assess exploitability and risk. Work with Cyber Security Operations Center to ensure mitigations are in place while vulnerabilities are being remediated</li><li>
Provide detailed risk assessments for discovered vulnerabilities.</li><li>
Enforce remediation timelines in accordance with Standard Operating Procedures.<ul><li>
Remediation Tracking &amp; Reporting</li></ul></li><li>
Collaborate with IT and DevOps teams to ensure timely remediation of vulnerabilities</li><li>
Conduct regular and ad-hoc vulnerability scans using tools like Wiz or Tenable</li><li>
Integrate tools with all cloud environments. Ensure complete coverage of all IT environments.</li><li>
Ensure alignment with internal security policies, regulatory requirements (NIST/SOC), and industry best practices.</li><li>
Support audits and assessments by providing evidence and documentation.<ul><li>
Stakeholder Engagement</li></ul></li><li>
Act as a liaison between security, IT, development, and risk teams</li><li>
Provide clear, actionable recommendations tailored to technical and non-technical audiences.<ul><li>
Mentor Junior Analysts</li></ul></li><li>
Provide guidance and training to junior members of the VCM team.<ul><li>
Process Improvements</li></ul></li><li>
Identify potential gaps in the vulnerability or compliance management programs and propose improvements.</li><li>
Develop and maintain Standard Operating Procedures, Frameworks, and Job Aids/HowTos.</li></ul>
QUALIFICATIONS:<p></p><p><b><br>
Education</b>
</p><ul><li>Bachelor's Degree or equivalent required.BA/BS degree in Computer Science, Information Systems, Cyber Security or a related technical field. Master&rsquo;s Degree is a plus.</li></ul><div></div><p><b><br>
Minimum Experience</b></p><p><br>
</p><ul><li>Minimum of 7 years of experience with security engineering and operations, as well as experience managing and supporting large, complex mission-critical systems and with Vulnerability management tools, patching processes and tools, VM operation/workflow, or configuration/Baseline/File-integrity monitoring applications and processes.</li><li>
Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future. U.S. FinTech does not offer H-1B sponsorship for this position.</li></ul><div></div><div><b><br>
Specialized Knowledge &amp; Skills</b><br>
</div><div></div><ul><li>Subject matter expert of cloud based critical infrastructure systems and security threats for these systems (AWS Cloud experience required)</li><li>
Subject matter expert with cyber security in the domains of vulnerability and compliance management.</li><li>
Familiarity with latest security vulnerabilities, advisories, incidents, penetration techniques, understanding of attacks, and determination of countermeasures.</li><li>
Subject matter expert of network and system vulnerabilities, malware, networking protocols, multi-tiered applications, and attack methods to exploit vulnerabilities.</li><li>
Experience in senior technical security role, including network security, operating system security, Internet or Web security, and vulnerability testing.</li><li>
Strong knowledge of networking fundamentals such as TCP/IP and basic packet analysis, network engineering, and local and wide area (LAN/WAN) technologies and topologies.</li><li>
Must have experience conducting comprehensive vulnerability assessments with vulnerability monitoring tools (Wiz and Tenable).</li><li>
General knowledge and experience in Windows / Linux Operating Systems, baseline security configurations, audit, forensics, Patch Management for these OSs.</li><li>
Experience developing Standard Operating Procedures (SOPs), job aids, and hands-on training materials.</li><li>
Be able to work in fast paced environment with occasional on-call activities.</li><li>
Excellent interpersonal skills, presentation skills, and verbal / written communication skills.</li><li>
Self-starter; adaptable to change; motivated to set personal and program goals and pro-actively track performance against goals and initiatives.</li><li>
Ability to manage multiple priorities &ndash; projects, deliverables, and stakeholders.</li><li>
Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.</li><li>
Active in the security industry; equipped with external networking relationships to maintain relevant knowledge of best practices, tactics, strategies and technologies.</li><li>
AWS Security, AWS Architect certifications desired.</li></ul><div>
Pay Range $156,500 to $181,000</div><div>
U.S. FinTech's pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) a candidate&rsquo;s qualifications, skills, competencies, and experience, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. U.S. FinTech offers a competitive total compensation package, which includes a performance bonus, 401k match, healthcare coverage, PTO, and a broad range of other benefits.</div><div></div><p><b><br>
Employment</b></p><p>
As a condition of employment with U.S. Financial Technology, any successful job applicant will be required to successfully complete a background investigation, which may also include a credit check for positions in some areas of our business.<br>
</p><p></p><p>U.S. Financial Technology is an Equal Opportunity Employer.</p><p></p><p><br>
##LI-Remote</p></div>

Lead, Security Engineer V&CM

4P Consulting Inc.

<div><div>Vulnerability Assessment Analyst IV &ndash; Container Security &amp; Exposure Management
<p><b>Location: </b>Birmingham, AL or Atlanta, GA
<br>
<b>Client: </b>Southern Company Services
<br>
<b>Contract Duration: </b>15 Months
<br>
<b>Work Schedule: </b>Hybrid &ndash; 4 days onsite
<br>
<b>Experience: </b>10+ Years
</p><h2 class="jobSectionHeader"><b>Job Summary
</b></h2><p>We are seeking an experienced <b>Vulnerability Assessment Analyst IV </b>to support container security and exposure management within a cybersecurity organization. This role will focus on identifying, validating, and assessing security vulnerabilities across IT/OT systems, cloud-native platforms, Kubernetes, OpenShift, Docker, container images, clusters, pipelines, and supporting infrastructure.
</p><p>The ideal candidate will have strong hands-on experience with vulnerability assessment, container security, DevSecOps, exposure management, attack path analysis, scripting, and risk reporting.
</p><h2 class="jobSectionHeader"><b>Key Responsibilities
</b></h2><ul><li>Identify and assess security vulnerabilities across IT and OT systems.
</li><li>Perform vulnerability scans and analyze exposures in web applications, networks, systems, embedded devices, firmware, and containerized environments.
</li><li>Evaluate container security risks across Kubernetes, OpenShift, Docker, AKS, EKS, GKE, and similar platforms.
</li><li>Assess container images, base images, dependencies, Kubernetes manifests, Helm charts, runtimes, RBAC, network policies, secrets handling, and cluster configurations.
</li><li>Validate exposure paths and determine real-world exploit potential.
</li><li>Conduct attack path mapping and prioritize high-risk vulnerabilities.
</li><li>Support exposure management operations, including data review, reporting, trend analysis, remediation tracking, and escalation.
</li><li>Partner with platform, infrastructure, application, DevOps, and security teams to recommend practical mitigation strategies.
</li><li>Monitor emerging threats, zero-days, CVEs, and exploitation methods.
</li><li>Translate technical findings into clear business risk summaries for stakeholders and leadership.
</li></ul><h2 class="jobSectionHeader"><b>Required Qualifications
</b></h2><ul><li>10+ years of experience in cybersecurity, vulnerability assessment, exposure management, DevSecOps, infrastructure security, or related roles.
</li><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or equivalent experience.
</li><li>Strong experience with Kubernetes, OpenShift, Docker, AKS, EKS, GKE, or similar container platforms.
</li><li>Ability to assess vulnerabilities in container images, dependencies, manifests, Helm charts, runtimes, and cluster configurations.
</li><li>Knowledge of container security controls such as image scanning, least privilege, non-root containers, secrets handling, RBAC, pod security standards, network policies, and runtime monitoring.
</li><li>Experience with vulnerability management, attack surface management, cloud security posture management, and exposure management.
</li><li>Proficiency with scripting languages such as Python, PowerShell, or Bash.
</li><li>Familiarity with OWASP methodologies and common application/system vulnerabilities.
</li><li>Experience with SIEM platforms for detection validation and log analysis.
</li><li>Strong analytical, troubleshooting, communication, and documentation skills.
</li><li>Must pass NERC CIP and Insider Threat Protection background checks.
</li></ul><h2 class="jobSectionHeader"><b>Preferred Qualifications
</b></h2><ul><li>Experience in DevSecOps, application security, offensive security, penetration testing, adversarial threat simulation, or container platform engineering.
</li><li>Certifications such as CKS, CKAD, CKA, OSCP, CEH, GSEC, CISSP, or CISA.
</li><li>Experience supporting IT and OT security environments.
</li><li>Experience working with cloud-native enterprise systems and CI/CD pipelines.
</li></ul><h2 class="jobSectionHeader"><b>Key Skills
</b></h2><p>Vulnerability Assessment, Container Security, Exposure Management, Kubernetes, OpenShift, Docker, DevSecOps, IT/OT Security, Cloud Security, Attack Path Mapping, Vulnerability Management, SIEM, OWASP, RBAC, Image Scanning, Runtime Monitoring, Python, PowerShell, Bash, CI/CD Security, Risk Reporting.</p></div></div>

Vulnerability Assessment Analyst IV 4P/715

American City Business Journals

<div>
 Supports research operations across assigned newsrooms, focusing on collecting, refining, and enriching local business data to meet editorial calendar and news reporting deadlines. This position will be part of a team directed by an assigned Senior Researcher to support specific ACBJ newsrooms.
 <br/>
 <br/>
 <ul>
  <li>
   This position is remote and can be based from any existing ACBJ market location
  </li>
  <li>
   Serve as primary researcher for assigned markets, collecting and curating local data
  </li>
  <li>
   Access and organize data from central and third-party sources
  </li>
  <li>
   Produce and field responses for local business surveys
  </li>
  <li>
   Maintain and update local data environments
  </li>
  <li>
   Collaborate with researchers and align efforts with national standards
  </li>
  <li>
   Provide data for rankings and editorial content
  </li>
  <li>
   Strong attention to detail and organizational skills
  </li>
  <li>
   Ability to work collaboratively within a team
  </li>
  <li>
   Data fluency and proficiency in Microsoft Excel
  </li>
  <li>
   Self-starter with problem-solving ability
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Education/Experience:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree or equivalent experience preferred
  </li>
  <li>
   Significant experience in research or data-driven roles, with leadership capability
  </li>
  <li>
   Familiarity with business and economic indicators
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Working Conditions And Physical Requirements
  <br/>
  <br/>
 </strong>
 General office environment. Extensive computer use required.
 <br/>
 <br/>
 The well-being of our employees is paramount. For that reason, ACBJ offers a variety of rich and competitive benefits including bundled health, dental and vision plans designed to meet our employees' needs. We also provide programs to support mental health and wellness and a generous time-off policy in support of taking the time needed to recharge. Here are just a few of our programs: * Paid Parental Leave * 401K Plan with Employer Match * Flexible Spending Accounts * Employee Assistance Program * Multiple Employee Dependent Scholarship Programs * Commuter Flexible Spending * Lifestyle Programs (Including incentives for healthy habits) * Medical Infertility Services * Corporate discount programs * Employee Recognition/Service Awards * And so much more! (Benefits coverage indicated above may be based on employee participation in benefit programs and eligibility)This Company is an Equal Opportunity Employer. The Company considers applicants for all positions without regard to race, color, religion, national origin, gender, age, marital status, disability, veteran status, sexual orientation, genetic information or any other characteristic protected by applicable city, state or federal law. COMPENSATION: NA
 <br/>
 <br/>
</div>


Researcher

Univeristy Of Colorado Boulder

<p></p><div><div><div><div><p>Requisition Number:</p>
<div>72623
</div></div><div><p>Location:</p>
<div><div>Boulder, Colorado</div>
</div></div><div><p>City</p>
<div>Boulder
</div></div><div><p>State</p>
<div>Colorado
</div></div><div><p>Employment Type:</p>
<div>Research Faculty
</div></div><div><p>Schedule:</p>
<div>Part-Time
</div></div><div><p>Posting Close Date:</p>
<div>17-Jun-2026
</div></div><div><p>Date Posted:</p>
<div>15-Jun-2026
</div></div></div><div>
</div><div><div><h3 class="jobSectionHeader"><b>Job Summary
</b></h3><div><div><p>This position will support the NSF-Funded Study, &quot;Co-Design as a Strategy for Translation and for Scaling and Sustaining K&ndash;12 STEM Innovations.&quot; The researcher will perform coding of interview data, organize data using a secure platform, and participate in team coding meetings.</p>
</div><div>
CU is an Equal Opportunity Employer and complies with all applicable federal, state, and local laws governing nondiscrimination in employment. We are committed to creating a workplace where all individuals are treated with respect and dignity, and we encourage individuals from all backgrounds to apply, including protected veterans and individuals with disabilities.</div>
</div></div><div><h3 class="jobSectionHeader"><b>Who We Are
</b></h3><div><p>This project is studying the practices and outcomes of co-design in NSF-funded projects from 2013-2025. It is part of the institute of Cognitive Science (ICS) at CU-Boulder. Founded in 1968, the mission of ICS is to understand and enhance human cognition, learning, and development through the creation of interdisciplinary partnerships. ICS fosters rich scientific interchange across researchers from a broad range of disciplines including Artificial Intelligence, Linguistics, Psychology, Neuroscience, Computer Science, Philosophy, and Education.</p>
</div></div><div><h3 class="jobSectionHeader"><b>What Your Key Responsibilities Will Be
</b></h3><div><p>This position will support the NSF-Funded Study, &quot;Co-Design as a Strategy for Translation and for Scaling and Sustaining K&ndash;12 STEM Innovations.&quot; The researcher will perform coding of interview data, organize data using a secure platform, and participate in team coding meetings.</p>
</div></div><div><h3 class="jobSectionHeader"><b>What We Can Offer
</b></h3><div><p>$25 per hour/ .25 FTE.</p>
</div></div><div><h3 class="jobSectionHeader"><b>Benefits
</b></h3><div>Temporary positions at the University of Colorado are not benefits-eligible, however, all positions are eligible for paid sick leave.
</div></div><div><h3 class="jobSectionHeader"><b>Be Statements
</b></h3><div><div>Be ambitious. Be groundbreaking. Be Boulder.</div>
</div></div><div><h3 class="jobSectionHeader"><b>What We Require
</b></h3><p></p><div><ul><li>BA in social sciences.</li><li>
Experience in working with and managing qualitative data.</li></ul>
</div></div><div><h3 class="jobSectionHeader"><b>Special Instructions
</b></h3><div><p>To apply, please submit the following materials:</p><ul><li>
Resume or CV.</li></ul><p>
Please apply by 6/17/2026 for consideration.</p><p>
Note: Application materials will not be accepted via email. For consideration, applications must be submitted through CU Boulder Jobs.</p>
</div></div></div></div><div><h4 class="jobSectionHeader"><b>Posting Contact Information</b></h4>
<p><b>Posting Contact Name:</b> Boulder Campus Human Resources</p>
<p><b>Posting Contact Email:</b> Recruiting@colorado.edu</p></div></div>

Temporary Researcher

Search 146+ Vulnerability researcher jobs near you this June. New roles added regularly across leading industries. Apply today.