Source Job

Global

  • Research security vulnerabilities in modern browsers such as Firefox, Chromium, and WebKit.
  • Perform source-code auditing of large C/C++ codebases to identify memory-safety, logic, and sandbox flaws.
  • Develop fuzzers, harnesses, and proof-of-concept exploits to validate vulnerabilities.

C/C++ Reverse Engineering Fuzzing

8 jobs similar to Browser Vulnerability Researcher

Jobs ranked by similarity.

US

  • Conduct vulnerability research and reverse engineering using advanced static and dynamic analysis tools.
  • Develop proof-of-concept exploits and bypass modern exploit mitigations.
  • Lead small to medium-sized teams and communicate findings to stakeholders.

A partner company focuses on cybersecurity research and vulnerability analysis for national security. The team is mission-driven and works on complex security challenges.

$174,000–$235,000/yr
US

  • Investigate browser behavior and discover novel device-identification and bot-detection techniques.
  • Lead research from initial hypothesis through validation and engineering implementation.
  • Build automated research tools and collaborate with product and engineering teams.

They develop advanced device intelligence and fraud-detection technology. They are a fully remote, globally distributed team committed to an inclusive work environment.

US

  • Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities.
  • Develop and refine exploit techniques and collaborate with product management to translate findings into security capabilities.
  • Publish research through blogs, white papers, and conferences, and contribute to open-source security tools.

Endor Labs secures AI-generated code by providing vulnerability detection and remediation for software supply chains. They are a growing security company with a collaborative, customer-focused culture, backed by $163M in funding and serving major enterprises.

UK

  • Write Web-Platform tests and Gecko mochitests to improve Session History coverage and correctness.
  • Fix test failures and bugs to improve Gecko correctness, working through code review with module owners.
  • Collaborate with the Firefox DOM Core team to improve the health of the Session History area.

Mozilla builds the Firefox browser and champions a healthy, open internet. It is a global, mission-driven organization known for its commitment to privacy and open source software.

Poland Bulgaria

  • Review cybersecurity prompts submitted to an AI system that cannot be confidently classified as benign or malicious.
  • Determine the underlying intent behind each prompt and assess whether the user is pursuing a legitimate purpose or intent to cause harm.
  • Annotate each prompt with an intent label and a clear rationale, escalating ambiguous cases to a reviewer.

This company builds specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions to validate AI agent behavior before deployment, and they are currently expanding their contributor network.

North America

  • Conduct original offensive research against Dia, including prompt injection, sandbox escape, and cross-profile data access.
  • Threat model new surfaces with engineering teams and review features before they ship.
  • Build automated vulnerability discovery systems, including fuzzing and AI-assisted hunting pipelines.

The Browser Company is building a better way to use the internet, with a focus on an AI-powered browser called Dia. They are a remote-first team of nearly 100 people who value diversity and craft.

Germany

  • Implement privacy-improving, anti-tracking, and threat intelligence protections into Firefox.
  • Advance the browser engine by building performant C++, JavaScript, and Rust code in Gecko.
  • Work asynchronously with a geographically distributed team to ship complex privacy features.

Mozilla Corporation is the non-profit-backed technology company behind Firefox and other internet privacy brands. With over 225 million monthly users, we are a mission-driven, open-source organization shaped by a culture of innovation and public service.

$80,358–$109,877/yr
Canada

  • Reverse-engineer malware samples to identify communication mechanisms and develop Snort signatures.
  • Produce detailed documentation on malware behavior and detection strategies.
  • Collaborate with team members to improve analysis and response processes.

TrendAI is the global AI security leader and enterprise business unit of Trend Micro, empowering organizations with full AI visibility and consolidated security. The company is trusted by the largest enterprises across 185 countries and fosters a diverse, collaborative culture.