Part-time work for proven offensive security researchers. You review analyses of exploits, vulnerabilities and security scenarios, check them for correctness and give structured feedback that draws on your own research record.
What you will do
- Review analyses of complex security scenarios, exploits and vulnerability reports.
- Check technical writeups for correctness, exploitability and quality of mitigations.
- Validate root-cause analysis across software, operating systems, networking, cloud and web applications.
- Give structured feedback on security reasoning, exploit chains and defensive advice.
- Help build benchmarks for advanced security capabilities.
What you need
- Several of these: membership in a top-ranked CTF team, CVEs you found or co-authored, accepted findings in major bug bounty programs, research at a respected security lab or academic group, or well-regarded security publications and writeups.
- Strong knowledge of exploit development, reverse engineering, binary analysis, vulnerability research, operating systems, networks, web security or cryptography.
Preferred: professional offensive or application security experience, tools such as IDA Pro, Ghidra, Binary Ninja or Radare2, fuzzing and analysis frameworks, OS, browser, cloud, embedded or mobile security, strong C/C++, Rust, Python, Go or Java, and clear technical writing.
Also valued: bug bounty Hall of Fame recognition, talks or papers at major security conferences, open-source security tool work, and certifications such as OSCP, OSEP, OSCE3 or GIAC.
How pay works
The listing gives an hourly rate of $200-250/hr.
Apply (opens in a new tab)