Senior Exploit Developer

About VulnCheck

VulnCheck is a leader in exploit intelligence, providing structured, weaponized vulnerability data tailored for integration with data lakes, ETL pipelines, automation, and AI-driven workflows. Our solutions elevate cybersecurity capabilities by delivering precise exploit context for defending against active threats.

Role Overview

We are seeking a Senior Exploit Developer experienced in reverse engineering and exploit creation to join our Initial Access Intelligence team. This team delivers exploits and related artifacts to help clients monitor exploitation stages from exposure to detection. You will collaborate with expert hackers and threat analysts to support global enterprises, governments, and intelligence agencies in countering emerging cyber threats. While initial access vulnerabilities are the focus, opportunities to work on various local exploits and contribute to our open-source go-exploit framework are available. Although this is a fully remote position, preference is given to candidates based in Cheltenham, UK.

Key Responsibilities

• Perform reverse engineering to conduct root cause analyses of software vulnerabilities.
• Create original software exploits targeting initial access vulnerabilities lacking public proof-of-concept code.
• Develop network detection signatures such as Suricata & Snort rules and YARA signatures to identify exploit attempts in network traffic.
• Design Attack Surface Management (ASM) queries using platforms like Shodan, Census, FOFA, and ZoomEye to locate vulnerable systems subject to targeting.

Required Qualifications

• Hands-on experience developing exploit code for remote code execution and initial access vulnerabilities that do not require authentication.
• Proven ability to work effectively both independently and in small remote teams on technical projects.

Preferred Credentials

• Previous cybersecurity experience within vendor organizations or government agencies.
• Ability to present samples of authored exploit code.

Additional Information

This role may require access to technologies governed by U.S. export control laws. Employment is dependent upon obtaining necessary authorization under relevant laws and regulations. The company may not seek such authorization if not obliged to do so.

Company Benefits

• Competitive salary coupled with employee equity participation.
• Health, dental, and vision insurance coverage.
• Unlimited paid time off.
• Contribution to pension plans.
• Flexible remote work environment.
• Reimbursement for home internet and phone expenses.
• Continuous professional development, coaching, and educational resources.
• Opportunities for career growth within a rapidly expanding team.

About Us

Founded in 2021 and headquartered in Lexington, Massachusetts, VulnCheck is built upon over 20 years of expertise in cybersecurity vulnerability exploitation. Our mission is to empower organizations by delivering superior exploit and vulnerability intelligence, helping protect vital infrastructure including healthcare devices, utilities, and communication networks. Our culture promotes curiosity, innovation, and growth in a supportive and inclusive environment. We are an Equal Employment Opportunity employer committed to accommodating applicants with disabilities.