Principal Vulnerability Engineer

Salary: £38,000 - 78,000 per year

Requirements

• We require 5+ years of mixed vulnerability research and software engineering experience.
• We require a demonstrable track record of original 0-day discovery, such as public advisories, CVEs, or equivalent.
• We require deep n-day research and patch diffing experience.
• We require confidence across both web and binary vulnerability classes.
• We require production-grade software engineering experience, ideally in Python.
• We require mastery of Burp Suite, Ghidra/IDA, debuggers, and fuzzers.
• We require hands-on experience using LLMs in research workflows.

Responsibilities

• We lead deep research across 0-days and n-days, including patch diffing across source-available and binary-only targets.
• We design tooling for automated vulnerability discovery, exploit validation, and detection signature generation.
• We architect production-grade, LLM-powered research workflows.
• We focus on the vulnerabilities that matter, including RCEs, auth bypasses, and other high-impact issues that change client risk posture quickly.

Technologies

• Architect
• LLM
• Python
• Security
• Web

More

We are a research-driven, venture-backed cybersecurity scale-up trusted by Fortune 500 enterprises and critical infrastructure providers. Recognised by Gartner, we have raised $29M and are scaling quickly worldwide. This is a permanent, full-time Principal Vulnerability Engineer role that is fully remote for UK-based candidates, with a salary of up to £110,000 plus benefits. In this role, we own the full vulnerability lifecycle from discovery through detection to deployment, building production-grade tooling and pioneering LLM-powered offensive security workflows.

last updated 19 week of 2026