Senior Vulnerability Researcher

Job Overview:

We are looking for a motivated Senior Vulnerability Researcher with a solid computer security background and hands-on experience to join our architecture security team in Cambridge, UK or Austin, US.

In this role, you will be at the forefront of identifying, analyzing, and mitigating security vulnerabilities. Your job will focus on conducting in-depth research on software and hardware, providing actionable intelligence and collaborating with architects, designers, developers and incident response teams to ensure the security of our technologies and products.

Responsibilities:

· Identify, analyze, and document security vulnerabilities in software and hardware

· Research new attack techniques and trends to stay ahead of emerging threats

· Develop proof-of-concept exploits to demonstrate vulnerability impact

· Collaborate with product development and incident response teams to mitigate vulnerabilities

· Proactively feedback architectural improvements based on findings

· Contribute to the creation of technical reports, advisories, and internal documentation

· Present findings to internal team members and, where applicable, to customers

Required Skills and Experience:

· Proven experience in vulnerability research, reverse engineering, or exploit development (played CTFs, published research and talks, exploits, PoCs, etc.)

· Proficiency in low level programming (C and assembly)

· Strong understanding of operating system internals

· Knowledge of binary exploitation mitigation techniques (ASLR, NX, PAN, etc.) and bypass strategies

“Nice To Have” Skills and Experience:

· Knowledge of microarchitectural exploits (side channels, speculative execution attacks, etc.)

· Knowledge of the Arm architecture and experience working on Arm devices

· Experience with fuzzing techniques and tools for vulnerability discovery

In Return:

You will work alongside highly skilled security researchers in the company and the ecosystem. Our team is actively looking for security vulnerabilities and threats that could impact the overall Arm architecture. This includes proposing and analysing countermeasures.

Team members are also involved in responding to new security threats reported externally to Arm, this provides the opportunity to collaborate with academic researchers and security teams in other companies. The ubiquitous Arm architecture gives this team a head-start to reach far ahead into the security state of products of tomorrow.

#LI-GT1

Accommodations at Arm

At Arm, we want our people to Do Great Things. If you need support or an accommodation to Be Your Brilliant Self during the recruitment process, please email accommodations@arm.com. To note, by sending us the requested information, you consent to its use by Arm to arrange for appropriate accommodations. All accommodation requests will be treated with confidentiality, and information concerning these requests will only be disclosed as necessary to provide the accommodation. Although this is not an exhaustive list, examples of support include breaks between interviews, having documents read aloud or office accessibility. Please email us about anything we can do to accommodate you during the recruitment process.

Hybrid Working at Arm

Arm’s approach to hybrid working is designed to create a working environment that supports both high performance and personal wellbeing. We believe in bringing people together face to face to enable us to work at pace, whilst recognizing the value of flexibility. Within that framework, we empower groups/teams to determine their own hybrid working patterns, depending on the work and the team’s needs. Details of what this means for each role will be shared upon application. In some cases, the flexibility we can offer is limited by local legal, regulatory, tax, or other considerations, and where this is the case, we will collaborate with you to find the best solution. Please talk to us to find out more about what this could look like for you.

Equal Opportunities at Arm

Arm is an equal opportunity employer, committed to providing an environment of mutual respect where equal opportunities are available to all applicants and colleagues. We are a diverse organization of dedicated and innovative individuals, and don’t discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.