Junior Vulnerability Researcher

Core Tech Security’s mission is to deliver high-end security research and bespoke solutions to some of the most interesting cyber security clients in the UK. In practice, this means that we have built a world-class team of vulnerability researchers, reverse engineers, and high-assurance software engineers.

Core Tech is looking for talented individuals with an active interest in low-level software vulnerability research and reverse engineering. In practice this means you will be familiar with native languages (e.g. C/C++), and ideally have some understanding of how computer programs are loaded and executed on Linux-based platforms.

Our primary focus is conducting offensive security research against mobile operating systems and other embedded devices such as routers and CCTV cameras. Our research team use Ghidra as our tool of choice for reverse engineering and produce proof of concepts in the most suitable language for the project which could be C, C++, Python or assembly code. The role requires an inquisitive mindset, persistence and enthusiasm for solving difficult research tasks.

Knowledge of hardware would be beneficial to this role.

As a Core Tech Junior Consultant you will be enrolled on the Core Tech Academy where you’ll be provided with the opportunity to rapidly skill up in bug hunting and reverse engineering through a mix of training, mentoring and shadowing with our experienced team. The Academy also provides the opportunity to attend seminars/presentations on a whole range of subjects, presented by colleagues from across the business.

• An interest in how software vulnerabilities in binaries, exploits and their mitigations work.
• Experience with Reverse Engineering code using architectures such as ARM/AArch
  64, x86 or MIPS.
• Familiarity with Operating System internals and working in a command shell environment.
• Familiarity with C and/or C++ programming.
• Experience in basic scripting using Python.
• A basic understanding of TCP/IP and networking concepts.
• A passion for technology and a genuine interest in solving difficult and complex problems.

We are looking for candidates with a passion and enthusiasm for cyber security specifically in the field of Vulnerability Research. Ideal candidates will be able to demonstrate an active interest and foundation knowledge in several of the skills listed above.

This is a Junior level role starting in September 2027 - you may be a recent graduate or someone that has some work experience and active interest in the area of Vulnerability Research.

• Promotions are based on technical excellence and reviewed regularly
• 25 days holiday per year (with bank holidays on top), option to buy/sell up to 5 days per year
• Level up with an extra day of holiday per year, up to an extra 5 days, starting from 2 years' service
• We offer financial support to cover HMRC allowable costs of relocating if you’re moving to the area
• Training and development opportunities to support your career aspirations
• O'Reilly books subscription which provides access to huge range of technical books
• Regular events including internal technical conferences, company socials and pizza-fuelled lunchtime seminars
• Free seasonal fruit, tea, coffee, milk, squash and hot chocolate

• Private online GP, and a helpline to speak with various healthcare professionals
• Physiotherapists, osteopaths or chiropractors for muscle, bone, and joint pain
• Mental health - counselling, and specialist consultations and treatment with psychologists and cognitive behavioural therapists
• Annual Health assessment

• A company bonus scheme so that everybody is rewarded for company success. This is an annual award that is based on the company hitting its targeted forecast. We have achieved this every year to date
• 8% company contribution to pension with no minimum requirement for employee contribution
• Death in Service cover of 4x base salary

• Enhanced maternity/paternity/adoption leave: 12 weeks maternity leave at full pay as soon as you join, further enhanced to 20 weeks full pay from 2 years’ service. 2 weeks paternity leave at full pay…