Cyber Vulnerability Researcher

Operational Cyber Vulnerability Researcher

• Location: Gloucester or Manchester (
  Onsite working required
  )
• Security Clearance: Must be eligible to obtain eDV Security Clearance

Join a specialist Operational Cyber team made up of industry-leading experts in vulnerability research, reverse engineering and high-assurance development
, working on some of the UK's most challenging cyber problems.

This is an opportunity to conduct cutting‑edge research that has a direct impact on UK National Security, identifying vulnerabilities across complex platforms and technologies to help deliver mission‑critical cyber capabilities.

Whether you are already working in vulnerability research or have developed your skills through areas such as penetration testing, exploit development, CTFs or bug bounties, you'll receive dedicated training, mentorship and support to develop further within a world‑class cyber environment.

As an Operational Cyber Vulnerability Researcher
, you'll investigate complex systems, identify vulnerabilities and develop technical insights to support high‑impact cyber operations.

• Conduct vulnerability research and reverse engineering across a range of platforms and technologies.
• Analyse software and systems to identify security weaknesses and potential attack paths.
• Support exploit development activities, from vulnerability discovery through to proof‑of‑concept development.
• Develop and utilise tooling to support research activities.
• Work collaboratively with security researchers, engineers and technical specialists.
• Share knowledge and mentor junior team members.
• Communicate complex technical findings to both technical and non‑technical audiences.

We're looking for technically curious cyber professionals with experience across vulnerability research, offensive security or reverse engineering.

You'll ideally have experience with:

• Vulnerability research, reverse engineering or exploit development.
• Security testing backgrounds such as penetration testing, red teaming or offensive security.
• Experience using tools such as Ghidra, IDA Pro, Unicorn, debuggers or similar
  .
• Understanding of low-level programming concepts and languages.
• Knowledge of the exploit development lifecycle, from identifying vulnerabilities through to proof‑of‑concept exploits.
• Ability to analyse complex technical challenges and develop creative solutions.
• Strong communication and collaboration skills.

Experience gained through professional roles, Capture the Flag challenges, security research projects or bug bounty programmes will be considered.

• Dedicated training budget, including specialist cyber training and conferences such as Black Hat
• Opportunity to work on highly sensitive programmes supporting UK National Security
• Access to experienced cyber researchers and technical mentors
• Clear career progression pathways
• Flexible working options, including consideration for part‑time applicants
• Private medical and dental cover
• Competitive pension scheme and wider benefits package

Please note: Due to the nature of the work, applicants must be eligible to obtain Enhanced Developed Vetting (eDV) Security Clearance
. Existing clearance is not required to apply, but candidates must be eligible to work in the UK.