25 of 25 Permanent Vulnerability Research Jobs in London

TITLE:** Senior DevOps/Platform Engineer - Autonomous Vulnerability Research (Harness Engineering)**SALARY:****Non-London: £72,702-£88,858****London: £84,051-£102,729****LOCATION(S): Manchester, Bristol, Edinburgh OR London****HOURS:** Full-time**WORKING PATTERN:** Our work style is hybrid, which involves spending at least two days … security threats, and to enable the Group's businesses to make change to their services safely and quickly. We are establishing a new Autonomous Vulnerability Research (Harness Engineering) Team with a bold mission: to build the Group's agentic vulnerability research platform, enabling AI-powered vulnerability ...

security, AI, and relentless experimentation. You’ll build production-quality tooling and push the boundaries of how LLMs can accelerate offensive security workflows - from vulnerability discovery and analysis through to exploit reproduction, validation, and automation. Your work feeds directly into the watchTowr Platform, powering the systems that identify, reproduce … mitigate vulnerabilities across our client base before attackers weaponise them. You understand offensive security and vulnerability research, but you don't need to be a career vulnerability researcher. What matters is that you're fascinated by how AI can fundamentally change the way security work gets done ...

Security Engineer to help protect billions of users and Meta's global infrastructure from evolving threats. In this role, you will conduct security assessments, vulnerability research, and threat modeling across Meta's products and systems — spanning mobile applications, web platforms, backend services, and internal infrastructure. You will identify … risk for Meta and its users by turning one-off security findings into durable, scalable defenses.Security Engineer Responsibilities:Conduct security assessments, penetration testing, and vulnerability research across Meta's web, mobile, and backend systems to identify and remediate security risksPerform threat modeling and security architecture reviews ...

About the Role As an Associate Vulnerability Researcher in Telecommunications, you will play a key role in developing the UK’s capability to understand and secure telecom systems. Working as part of a highly skilled and collaborative research team, you’ll be supported in building your expertise while … contributing to meaningful, real-world security challenges. This role is designed for individuals early in their research careers who are motivated to grow their technical depth and become experts in vulnerability research within telecom environments. What You’ll Be Doing Develop and Apply Research Skills ...

security needs. Develop automated security solutions that integrate into development pipelines. Maintain and enhance existing security automation processes and security capabilities. Understand and research technical details of core technology stacks and develop or enhance custom code analysis queries. Communicate vulnerability landscape and work on mitigations with stakeholders across … latest news and trends in automated security capabilities, secure development, and AI-assisted security workflows. Develop and enhance operational run books Perform ad-hoc vulnerability discovery, including code review and static analysis for key engineering teams, applications and services. Build or adopt new security capabilities to address issues ...

theres no limit to where a career at our client could take you. Role description You will be working hands-on within Cyber and Vulnerability Research, working in the most deeply technical part of the Cyber Security domain, whether its researching new technologies or creating software that makes … mobile and embedded systems and a range of languages including: Microsoft C, C#, C++, .NET Mobile iOS (Swift, Objective-C), Android (Java, Kotlin, C++) Vulnerability Research & Reverse Engineering (IDA/Ghidra/Binary Ninja, Frida) Web HTML, JavaScript, Web Sockets, Web Assembly, REST O/S Linux, Windows ...

Instagram и Facebook принадлежат компании Meta Platforms Inc., деятельность которой признана экстремистской и запрещена на территории РФ Задачи: Conduct security assessments, penetration testing, and vulnerability research across web, mobile, and backend systems to identify and remediate risks Perform threat modeling and security architecture reviews for products and infrastructure … team roadmap addressing complex, ambiguous risks aligned with broader team strategy Требования: Требования: 6+ Years of security engineering experience, including hands-on penetration testing, vulnerability research, or security assessments of web, mobile, or backend systems Experience with threat modeling and security architecture reviews for large-scale software systems ...

infrastructure to benchmark the progress of advanced AI capabilities in the domain of cyber security. Our goal is to carry out and publish scientific research supporting a global effort to understand the risks and improve the safety of advanced AI systems. Our current focus is on doing this … tasks that we can measure the performance of AI agents against. We are building a cross-functional team of cybersecurity researchers, machine learning researchers, research engineers and infrastructure engineers to help us create new kinds of capability and safety evaluations. As such to scale up we require all candidates ...

product helps security teams quickly and accurately detect intrusions in their cloud environment using canaries - decoys deployed to deceive attackers. Our research has already made an impact: We've disclosed vulnerabilities in Google's Gemini CLI We work with some of the world's leading security teams at companies … like Snyk, Riot Games, and Docker. We're at a key stage: we need someone to expand and formalize our research function, turning findings into actionable insights and engaging content while helping Tracebit contribute to the wider security community. Who we're looking for 5+ years in offensive security ...

point of application. As the ACI EMEA Intelligence Production Lead, you're responsible for managing the day-to-day execution of our threat research mission, setting overall direction across five intelligence delivery areas (Espionage, Cybercrime, Geopolitical Intelligence, Dark Web, and Vulnerability). You will oversee a team … will be on generating high-quality proprietary intelligence from commercial, non-public and enterprise data sources. You stay hands-on yourself, carrying out technical research and sharing insight across the business and with external clients. You engage in thought leadership, presenting our threat research within the security community ...

point of application. As the ACI EMEA Intelligence Production Lead , you’re responsible for managing the day-to-day execution of our threat research mission, setting overall direction across five intelligence delivery areas (Espionage, Cybercrime, Geopolitical Intelligence, Dark Web, and Vulnerability). You will oversee a team … will be on generating high-quality proprietary intelligence from commercial, non-public and enterprise data sources. You stay hands-on yourself, carrying out technical research and sharing insight across the business and with external clients. You engage in thought leadership, presenting our threat research within the security community ...

National Physical Laboratory (NPL) is seeking an Associate Vulnerability Researcher in Telecommunications. You will build expertise in vulnerability research within telecom environments, analyze systems to understand failures, and contribute to improving the resilience of telecom technology. You’ll work with experts and stakeholders from academia, industry … government to translate research into real‐world impact. #J-18808-Ljbffr ...

lead AI-specific incident response and pioneer model-driven defense mechanisms to automate threat hunting and mitigation. Your work will ensure that breakthrough scientific research is paired with an uncompromising, resilient defense safeguarding invaluable intellectual property while accelerating our innovation velocity. What you will doAdversarial Threat Modeling: Conduct cutting … ability to define and execute pragmatic mitigation strategies that balance a rigorous security posture with the high-velocity needs of a world-class scientific research organization. Software Development & Automation: Ability to write production-grade code (Python preferred) to build custom security tooling, automate telemetry collection, or enforce policy layers. ...

right in. Available Locations: Austin (US), London (UK) Role Summary As a Product Security Engineer, you will support security assessments and vulnerability operations for Cloudflare’s core software products. In this role, you will analyze system architecture, threat model new features, and ensure that product-related security findings … enrichment, building tools that help the team handle security findings at scale. In short, your work will sit at the intersection of Product Security, Vulnerability Operations, and internal AI Tooling. Ideally, you have experience in conducting academic/vulnerability research with a focus on systems security. Responsibilities ...

just findings that sit in a report. What you’ll do You’ll run offensive security assessments - penetration tests, red-team exercises, and vulnerability research - against Klarna's iOS and Android apps. You’ll reverse-engineer app binaries to surface sandboxing, permission, and platform-security weaknesses before … actually fixed. Who you are You’ve done hands-on offensive mobile security work - professional pentesting, red teaming, bug bounty, or dedicated security research - against iOS, Android, or both. You understand mobile internals: app sandboxing, permission models, and the security architectures of iOS and Android. You’re fluent with ...

just findings that sit in a report. What you'll do You'll run offensive security assessments — penetration tests, red-team exercises, and vulnerability research — against Klarna's iOS and Android apps. You'll reverse-engineer app binaries to surface sandboxing, permission, and platform-security weaknesses before … actually fixed. Who you are You've done hands-on offensive mobile security work — professional pentesting, red teaming, bug bounty, or dedicated security research — against iOS, Android, or both. You understand mobile internals: app sandboxing, permission models, and the security architectures of iOS and Android. You're fluent with ...

cybersecurity firm in the UK is looking for a Security Researcher to enhance their research program and improve product security. The role requires a minimum of 5 years in vulnerability research with strong knowledge of cloud platforms. The candidate will conduct technical research, publish findings ...

significant amounts of data and handling ‘big data’ for security analysis. Have a strong hands‐on understanding of offensive security (e.g., red teaming experience, vulnerability research, or capture the flag competitions). What’s in it for me? Competitive compensation – we believe that hard work, skills and ambition ...

Execute technical security assessments to identify risk, likelihood and impact an attacker may have on the System due to weak or missing controls Conduct research into real-world threat actor tactics, techniques, and procedures (TTP’s) to develop proof-of-concept tools and replicate real world attacks. Present findings … rules of engagement (ROE), and legal/regulatory requirements. What we would like to see from you 5+ years of experience in ethical hacking, vulnerability research, exploit development, penetration testing or being a member of a red team, with significant focus on web application security. Strong hands ...

Lloyds Banking Group is hiring a Senior DevOps/Platform Engineer for its Autonomous Vulnerability Research team in Manchester. You will design and run a Kubernetes-based platform, implement secure IaC with Terraform on GCP, and build hardened images with strong observability for auditability and regulatory scrutiny. ...

techniques SWIFT relies on Build the integration that plugs AI-assisted detection into how SWIFT develops software, working alongside existing security tooling Find the vulnerability classes current tooling structurally cannot see, and build the detection approach to catch them ahead of where the rest of the industry is Work … document the methodology so it survives Required Qualifications/Skills Demonstrated hands-on experience applying AI/LLM models to real security testing or vulnerability research Strong software engineering ability: can read, navigate, and reason about large, unfamiliar codebases directly, across multiple languages Deep working knowledge of application ...

Security Engineer to help protect billions of users and Meta's global infrastructure from evolving threats. In this role, you will conduct security assessments, vulnerability research, and threat modeling across Meta's products and systems — spanning mobile applications, web platforms, backend services, and internal infrastructure. You will identify ...

exploit-generation and validation pipeline behind Cyrion’s autonomous agent swarm. You will sit at the center of Cyrion’s offensive capability — the research that decides what our agents are able to find, chain, and prove. This is a hands-on exploit-development role embedded in a product team … isolated research function. What you'll do Design and implement new exploit-generation modules across web, API, and cloud attack surfaces. Build and maintain the sandboxed validation pipeline that confirms every candidate finding before it ships. Reverse-engineer novel vulnerability classes and translate them into repeatable, automatable test ...

against the latest emerging threats. Help design frameworks and architectures that allow customers to easily consume policies and understand their overall security posture. Monitor vulnerability disclosures (CVEs) and the latest threat intelligence to develop Tetragon runtime security policies. Work with software engineers at Isovalent and Cisco to improve … security policies in production. Publish content and give talks based on your work. Minimum Qualifications: 3+ years of experience in threat and/or vulnerability research. 3+ years of experience in developing security detections at scale, for use in a wide range of environments. 3+ years of experience working ...

techniques SWIFT relies on. Build the integration that plugs AI-assisted detection into how SWIFT develops software, working alongside existing security toolingFind the vulnerability classes current tooling structurally cannot see, and build the detection approach to catch them ahead of where the rest of the industry isWork entirely within … peers, and document the methodology so it survivesRequired Qualifications/SkillsDemonstrated hands-on experience applying AI/LLM models to real security testing or vulnerability researchStrong software engineering ability: can read, navigate, and reason about large, unfamiliar codebases directly, across multiple languages. Deep working knowledge of application security fundamentals ...