Experienced Vulnerability Researcher

Breakpoint Research builds novel, mission-critical offensive cyber capabilities, to strengthen and advance democracy. We're hiring experienced vulnerability researchers to join our team, alongside some of the best in the industry.

What you’ll be doing

• Vulnerability research across mobile, operating systems, firmware, and embedded systems.

• Reliable exploit development that demonstrates real mission impact.

• Low-level engineering for the hardest customer problems.

How we work

VRED is a tough game. We are relentlessly curious, unafraid to try new things, and we own our failures alongside our wins. We act with honesty, integrity, humility and kindness. The capabilities we've built came from a culture of deep collaboration, and we work hard to keep it that way.

About you

We're especially keen to hear from researchers who've taken work through to deployable products or capabilities, but it's not a requirement. You're comfortable working low-level (kernels, firmware, embedded systems, or similar), with strong reverse engineering skills alongside a fluent toolkit: C/C++, assembly (i.e. ARM/AArch64), fuzzing, static and dynamic analysis, exploit primitive development, modern mitigation bypass.

You take pride in the quality of your work and push yourself and others to make it better. You approach VR as a team sport — sharing what you know, asking when you don't, and picking teammates up when they get knocked down.

Much of the best work in this field can't be talked about publicly, and a track record without public artefacts is no obstacle for us. We are also open to candidates with non-traditional backgrounds.

Nice to have

• Experience leading technical projects or mentoring researchers.

• Depth in platforms relevant to our work: mobile (Android/iOS), browsers, hypervisors, embedded RTOS, kernel internals.

• Public research, CVEs, or conference talks.

Where you'll work

Remote, globally. We consider applicants from any country and any background. The team works in English, so you'll need to be fluent. We have a particular interest in UK-based candidates; holding or being eligible for Developed Vetting is a positive but not a requirement.

What we offer

Salaries are benchmarked for each local market we hire from — whether UK, US, Australia, or elsewhere. Come to us with your expectations. On top of that:

We aim to respond to all candidates via email within a week of their application. Please note that emails may go to your spam or junk folder.