SafetyTech Client #1 | Vulnerability Researcher
At a glance
Mid-level Security Operations & Analysis role at SD Solutions. Remote, Poland · full-time.
Pay not stated Security Operations & Analysis salary
remoteroles summary, based on the employer's posting.
What you'll do
- Review cybersecurity prompts the AI could not confidently classify, then judge the user's likely purpose and goal
- Assess technical detail and context to determine how much a response could help an attacker in practice
- Label each prompt and write a concise rationale that follows the project guidelines
- Repeat prompt reviews independently, escalate disagreements, and flag unclear cases or emerging attack methods
- Identify gaps in the guidelines and help make them clearer
What you bring
- At least five years of hands-on vulnerability research and reverse engineering
- You have found vulnerabilities using fuzzing, static or dynamic analysis, and patch comparisons
- You have developed exploits involving memory corruption, heap techniques, ROP, and bypassing mitigations
- You can use IDA, Ghidra, Binary Ninja and named debuggers across x86/x64 and ARM binaries
- You can distinguish defensive, educational, and research intent from attack preparation, and explain your judgment clearly in English
Who this fits
This role suits an independent researcher with careful analytical judgment who can assess what a cybersecurity prompt is trying to achieve. It is remote in Poland. The work involves independently reviewing prompts and documenting decisions against project guidelines.
From the employer
On behalf of SafetyTech Client #1, SD Solutions is looking for a highly motivated and technically proficient Vulnerability Researcher to join our security research division.
SD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer.
We are seeking a highly motivated and technically proficient Vulnerability Researcher to join our security research division.
This role is dedicated to determining the true intent behind cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious, with a focus on vulnerability research, exploit development, and reverse engineering.
You need to be independent, attentive to details, organized, eager to learn new things, and eager to research and solve complex problems.
Responsibilities:
- Review cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious
- Determine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm
- Apply deep domain expertise to judge the technical context, specificity, and real-world uplift a response would give an attacker
- Annotate each prompt with an intent label and a clear written rationale, following the project guidelines
- Independently annotate the same prompts as a second researcher; cases where researchers disagree are escalated to a reviewer
- Flag ambiguous cases, emerging attack techniques, and gaps in the guidelines, and help improve them
Requirements:
- Minimum of 5 years of proven, hands-on experience in vulnerability research and reverse engineering
- Proven ability to discover vulnerabilities through fuzzing, static and dynamic analysis, and patch diffing
- Exploit development experience, including memory corruption, heap exploitation, ROP, and mitigation bypasses (ASLR, DEP, CFI)
- Fluent use of IDA, Ghidra, Binary Ninja, and debuggers (WinDbg, GDB, LLDB) on x86/x64 and ARM binaries
- Understanding of the CVE lifecycle, n-day versus 0-day work, and how public PoCs are weaponized
- Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation
- Clear written communication in English, with the ability to document your reasoning concisely
Nice to have:
- OSED, OSEE, GIAC GXPN
- Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research
About the company:
A company building specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions used by AI development teams to validate agent behavior before deployment. Currently expanding a freelance contributor pool for scenario and environment development.
By applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy https://sd-solutions.breezy.hr/privacy-notice, and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.
Security Operations & Analysis work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security Operations & AnalysisRemote
Find me workBy the team behind remoteroles.