Job Description

Principal Vulnerability Engineer | High-Growth Cybersecurity Scale-Up | Fully Remote (UK)

• Remote – UK Based
• Up to £110,000 + benefits
• Permanent – Full time

Got a track record of 0-day discoveries, public CVEs, and a reputation for finding bugs that actually move the needle?

Join a research-driven, venture-backed cybersecurity scale-up trusted by Fortune 500 enterprises and critical infrastructure providers. Recognised by Gartner, $29M funded, and scaling fast worldwide.

As a Principal Vulnerability Engineer, you’ll own the full vulnerability lifecycle – from discovery, through detection, to deployment – building production-grade tooling and pioneering LLM-powered offensive security workflows.

What you’ll be doing:

• Leading deep research across 0-days and n-days, with patch diffing across source-available and binary-only targets
• Designing tooling for automated vulnerability discovery, exploit validation, and detection signature generation
• Architecting production-grade, LLM-powered research workflows
• Focusing on the vulnerabilities that matter – RCEs, auth bypasses, the bugs that change a client’s risk posture overnight

What they’re looking for:

• 5+ years of mixed vulnerability research and software engineering experience
• A demonstrable track record of original 0-day discovery – public advisories, CVEs, or equivalent
• Deep n-day research and patch diffing chops
• Confidence across both web and binary vulnerability classes
• Production-grade software engineering experience, ideally in Python
• Mastery of Burp Suite, Ghidra/IDA, debuggers, fuzzers
• Hands-on experience using LLMs in research workflows