Vulnerability Researcher

SD Solutions

. Review cybersecurity prompts submitted to an AI system that could not confidently classify them as benign or malicious .

Posted 10/22/2026full-timeRemote • Poland, BulgariaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in vulnerability research and reverse engineering, with a strong focus on exploit development and the ability to analyze cybersecurity prompts for intent and classification. Proficient in using advanced tools for binary analysis and demonstrating clear written communication skills.

Highest-signal resume keywords

Vulnerability ResearchExploit DevelopmentBinary Analysis ToolsAnalytical JudgmentClear Written Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ResearchReverse EngineeringExploit DevelopmentFuzzingStatic AnalysisDynamic AnalysisMemory CorruptionHeap ExploitationROPMitigation Bypasses

Soft Skills

Analytical JudgmentClear Written Communication

Tools & Technologies

IDAGhidraBinary NinjaWinDbgGDBLLDB

Certifications & Qualifications

OSEDOSEEGIAC GXPN

Industry Keywords

CVE Lifecycle0-DayN-DayPublic PoCsHackTheBoxPwn2OwnTryHackMeBug Bounty ProgramsSecurity Research

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Review cybersecurity prompts submitted to an AI system that could not confidently classify them as benign or malicious
Determine each prompt's underlying intent and goal, including whether the purpose is legitimate or harmful
Apply domain expertise to assess technical context, specificity, and real-world uplift a response would provide an attacker
Annotate each prompt with an intent label and clear written rationale according to project guidelines
Independently annotate the same prompts as a second researcher
Escalate cases where researchers disagree to a reviewer
Flag ambiguous cases, emerging attack techniques, and guideline gaps
Help improve the project guidelines

Requirements

What you’ll need

Minimum of 5 years of proven, hands-on experience in vulnerability research and reverse engineering
Proven ability to discover vulnerabilities through fuzzing, static and dynamic analysis, and patch diffing
Exploit development experience, including memory corruption, heap exploitation, ROP, and mitigation bypasses (ASLR, DEP, CFI)
Fluent use of IDA, Ghidra, Binary Ninja, and debuggers (WinDbg, GDB, LLDB) on x86/x64 and ARM binaries
Understanding of the CVE lifecycle, n-day versus 0-day work, and how public PoCs are weaponized
Strong analytical judgment to infer a user's underlying goal from a short prompt and distinguish defensive, educational, and research use from attack preparation
Clear written communication in English, with the ability to document reasoning concisely
OSED, OSEE, or GIAC GXPN certifications are nice to have
Demonstrated online achievements, write-ups, or contributions on HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research are nice to have

Benefits

Comp & perks

Benefits offered by SD Solutions; details available by contacting the company
Freelance contributor pool opportunity mentioned in the company description