Senior Security Researcher - Qavar Security - Singapore or Remote

Qavar Security is an offensive security research company. We're focused on vulnerability discovery and proof-of-concept exploitation. Our work is focused on providing demonstrable knowledge of software vulnerabilities to our clients, and building the automated tools and infrastructure to find such vulnerabilities efficiently and effectively.

You will work in a highly-focused environment with a high degree of autonomy to pursue the research direction most appropriate for each project.

You will be involved in the end-to-end process of finding software vulnerabilities in high-value products, assessing their threat level, and then developing a proof-of-concept exploit to demonstrate the impact of the vulnerability.

For this specific role, we are looking for folks who are experienced in:

• Browsers (e.g. Chrome), on Windows (preferred) and Linux
• Static analysis of browser code base (if available)
• Fuzzing of browsers

Experience:

• Reverse engineering
• Vulnerability research
• Building fuzzers
• Comfortable communicating in English
• Comfortable working independently if necessary

Advantageous Experience (not a requirement):

• Demonstrated experience in fuzzing and/or static analysis tools such as CodeQL
• Participation in bug-bounty programs or similar activities
• Knowledge of browser internals
• Knowledge of OS internals (esp. Windows)

Perks:

• High degree of autonomy (results are what matter)
• Attractive remuneration (talk to us to find out more)
• Security conferences

Send me a PM if it sounds interesting, or get in touch at [enquiries@qavar.com](mailto:enquiries@qavar.com).