Vulnerability Research Engineer (N-Day Analysis)

Key Responsibilities

• Triage newly disclosed vulnerabilities (CVEs, vendor advisories, security research) to assess real-world exploitability and impact.
• Reproduce and verify publicly reported or vendor-patched vulnerabilities in controlled lab environments to confirm exploitability and characterize attacker preconditions.
• Perform patch diffing and root-cause analysis to understand how a vulnerability works and how it's likely to be exploited in practice.
• Document findings in structured, standardised formats for ingestion into the threat intelligence portal (technical writeups, exploitation timelines, affected versions, indicators).
• Develop detection artefacts (e.g. signatures, indicators of compromise) alongside PoC verification work, where relevant.
• Track and correlate vulnerability disclosures against real-world exploitation evidence and threat actor activity.
• Contribute technical research to the company's blog posts, advisories and reports that build STAR Labs SG's reputation in the vulnerability intelligence space.
• Operate within a clear responsible disclosure and data-handling framework. All work is documented, defensively purposed, and consistent with coordinated vulnerability disclosure norms.

Requirements

• Strong background in vulnerability research, reverse engineering, or exploit analysis (CTF experience, CVEs, bug bounty history, or equivalent portfolio).
• Solid understanding of common vulnerability classes (memory corruption, injection, auth bypass, deserialization, etc.) across at least one major platform (web, Windows, Linux, or embedded).
• Experience with reverse engineering and debugging tools (e.g. Ghidra, IDA Pro, WinDbg, gdb).
• Ability to write clear, structured technical analysis for both technical and non-technical audiences.
• Comfortable working with a defined, documented research and disclosure process rather than ad hoc offensive tooling development.
• Experience with patch diffing tools and techniques.
• Familiarity with threat intelligence concepts (KEV, exploitation-in-the-wild tracking, IOC/detection engineering).
• Prior published vulnerability research, CVEs, or conference talks.
• Scripting/automation skills (Python) for research tooling and data pipelines.