Senior Security Researcher (Embedded)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Senior Security Researcher (Embedded): Conducting offensive security research and vulnerability discovery for QNX embedded operating systems with an accent on fuzzing, exploit development, and low-level system analysis. Focus on leveraging AI-assisted techniques to identify memory corruption and logic flaws in critical software deployed across automotive, industrial, and aerospace sectors.
Location: Ottawa, Ontario (Onsite)
Salary: $108,750 - $158,750
Company
QNX provides trusted, safe, and secure operating systems and development tools for mission-critical embedded systems worldwide.
What you will do
- Hunt for vulnerabilities in QNX products and embedded components using offensive security techniques.
- Design and execute large-scale fuzzing campaigns to uncover memory corruption and logic flaws.
- Perform root-cause analysis and develop exploits to demonstrate real-world attack scenarios.
- Integrate AI/ML-assisted techniques to accelerate vulnerability discovery and security analysis.
- Build and maintain automated security testing frameworks and exploit validation pipelines.
- Collaborate with engineering teams to triage and remediate identified security defects.
Requirements
- Hands-on experience in vulnerability research, penetration testing, or exploit development.
- Practical experience with fuzzing frameworks such as AFL or libFuzzer.
- Strong understanding of low-level software internals including memory management, process isolation, and POSIX APIs.
- Proficiency in C, C++, and Python.
- Ability to independently drive research initiatives from concept to validation.
- Must be based in or able to work from Ottawa, Ontario.
Nice to have
- Experience applying AI or machine learning to security research.
- Knowledge of automotive cybersecurity standards like ISO/SAE 21434.
- Reverse engineering experience with tools like IDA Pro, Ghidra, or Binary Ninja.
- Background in kernel, driver, or low-level system software development.
Culture & Benefits
- Opportunity to influence the security of software deployed in over 275 million vehicles.
- Access to comprehensive medical, dental, and vision insurance plans.
- Retirement savings programs and employee share purchase options.
- Variable Incentive Pay (VIP) bonus program based on company performance.
- Collaborative environment working with world-class embedded engineers and security researchers.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →