X-Day Offensive Research (XOR) Vulnerability Researcher
Chase
X-Day Offensive Research (XOR) Vulnerability Researcher - Assessments & Exercises
As an X-Day Offensive Research (XOR) Vulnerability Researcher - Assessments & Exercises at JPMorganChase in the Cybersecurity & Technology Controls line of business, you will contribute significantly to enhancing the firm's cybersecurity or resiliency posture by using industry-standard assessment methodologies and techniques to proactively identify risks and vulnerabilities in people, processes, and technology. In this role, you will design and deploy risk-driven assessments (or manage a highly-skilled team that does) and inform analysis to clearly outline root causes.
We are seeking a dedicated, self-motivated vulnerability researcher to tackle the complex demands of our mission. Working closely with fellow researchers and defense teams, you will investigate challenging targets, uncover novel attack surfaces, and develop innovative solutions that enhance our security posture. The ideal candidate combines deep technical curiosity with a strong background in reverse engineering, static analysis, and dynamic analysis, and thrives in a highly collaborative, research-driven environment.
Job responsibilities
- Design and execute testing and simulations – such as penetration tests, technical controls assessments, cyber exercises, or resiliency simulations – and contribute to the development and refinement of assessment methodologies, tools, and frameworks to ensure alignment with the firm's strategy and compliance with regulatory requirements.
- Evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation.
- Conduct in-depth vulnerability research and exploit development across a broad range of categories, including operating systems, mobile devices, web applications, browsers, edge devices, and enterprise software.
- Reverse engineer binaries using tools such as IDA Pro, Ghidra, or Binary Ninja to identify novel attack surfaces and develop proof-of-concept exploits.
- Use common vulnerability research toolsets such as fuzzers, disassemblers, debuggers, and code browsers for static and dynamic analysis.
- Perform N-day vulnerability analysis, patch diffing, and proof-of-concept exploit validation.
- Collaborate with cross-functional teams to develop comprehensive reports – including detailed findings, risk assessments, and remediation recommendations – supporting vulnerability triage, patch prioritization, and the sharing of indicators of compromise (IOCs) in service of the firm's mission requirements.
- Leverage threat intelligence and security research to stay ahead of emerging threats, vulnerabilities, industry best practices, and regulations, applying this knowledge to enhance the firm's assessment strategy and risk management, and engaging with peers and industry groups that share threat intelligence analytics.
- Document research findings, proof-of-concepts, and technical workflows to enable knowledge sharing and repeatability.
Required qualifications, capabilities, and skills
- 5+ years of experience in cybersecurity or resiliency, with demonstrated exceptional organizational skills to plan, design, and coordinate the development of offensive security testing, assessments, or simulation exercises.
- Track record of discovered vulnerabilities (CVEs) in high-profile targets in at least one of the following categories: operating systems, mobile devices, web applications, browsers, edge devices, or enterprise software.
- Proven hands-on experience in vulnerability research, proof-of-concept exploit development, coordinated vulnerability disclosure, and mitigating security vulnerabilities in open-source projects.
- Expertise in advanced analysis frameworks leveraging symbolic execution techniques and dynamic binary instrumentation to identify, triage, and exploit complex software vulnerabilities.
- Hands-on proficiency exploiting complex vulnerability classes – including use-after-free, double free, type confusion – and applying advanced exploitation techniques such as heap spraying and controlled memory corruption to achieve reliable code execution.
- Strong understanding of the internals of at least two operating systems throughout user mode and kernel mode (Microsoft Windows, GNU/Linux, Android, macOS, or iOS).
- Experience auditing large C/C++, Java, and.NET codebases combining automated static analyzers with manual review to trace data and control flow, uncover memory-safety, injection, and deserialization vulnerabilities and produce proof-of-concept code.
- Extensive reverse engineering expertise on x86/x64 and ARM/ARM64 binaries, employing IDA Pro, Ghidra, Binary Ninja, WinDbg, GDB, and RR for deep static/dynamic analysis and root cause vulnerability discovery.
- Knowledge of US financial services sector cybersecurity or resiliency organization practices, operational risk management processes, principles, regulations, threats, risks, and incident response methodologies.
- Ability to identify systemic security or resiliency issues as they relate to threats, vulnerabilities, or risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents.
- Excellent communication, collaboration, and report writing skills, with the ability to influence and engage stakeholders across various functions and levels.
Preferred qualifications, capabilities, and skills
- Bachelor's degree in computer science, or PhD in a related technical field, or an equivalent combination of education and/or experience in a related field.
- 5+ years of experience in vulnerability research and exploit development.
- Experience using fuzzing tools such as LibFuzzer, LibAFL, AFL++, OSS-Fuzz, and Syzkaller.
- Experience using program analysis tools such as LLVM, Angr, KLEE, Intel Pin, DynamoRIO, and Frida.
- Experience emulating embedded platforms for live debugging.
- Experience with kernel and low-level operating system development.
- Deep Linux internals knowledge (SELinux, AppArmor, Seccomp, eBPF, containers, VMs).
- Deep Windows internals knowledge (KASLR, DSE, SSDT, IDT, SMEP, SMAP, PXN, KPP, KDP, VBS, HVCI, KMCI, UMCI).
$80k - $83k
Position Summary The Houston Education Research Consortium (HERC), a program of the Kinder Institute for Urban Research (KIUR) at Rice University... ...work to provide flexibility and support collaboration. [3 days in-office/2 days remote]. Per Rice policy 440, work arrangements...SuggestedFull timeWork at officeRemote workWeekend workAfternoon shift$57k - $65k
...in your future, keep reading. The Opportunity As a Conflicts Researcher, you will utilize Intapp Open conflicts software and online research... ...of staff and attorneys utilizing tact and diplomacy. The Day-To-Day On Any Given Day, You Will Be Working With Firm Leadership...SuggestedWork experience placementLocal areaWorldwide- ...al., Cancer Discovery (2021); Rahal et al., Cancer Immunology Research (2024), Han et al., Nature (2024); and Peng et al., Cancer... ...and promote lung cancer. The fellow will also investigate how vulnerabilities arising during these early stages can be targeted through mechanism...Suggested
- Société employeur TotalEnergies E&P Research & Technology USA, Inc. Domaine Opérations Exploitation Type de contrat CDI Expérience Minimum... ...office‑based employees work together from dynamic workspaces 3 days per week to build teamwork through collaboration while also...SuggestedWork at officeWork from homeVisa sponsorshipWork visa2 days per week3 days per week
- ...The University of Houston's Department of Computer Science invites applications for a Postdoctoral Researcher to work with Dr. Damian Dechev. The position supports an active research program at the intersection of concurrent computing, high-performance and scientific...Suggested
- ...academic medical center serving the Greater Houston metropolitan area. Role Description This is a full-time, on-site Postdoctoral Researcher role based in Houston, TX. The Postdoctoral Researcher will conduct independent and collaborative research projects, design and...Full time
$66.56k - $79.04k
...s space programs, solving the hardest problems and providing unmatched technical expertise. As the operator of a federally funded research and development center (FFRDC), we are broadly engaged across all aspects of space— delivering innovative solutions that span satellite...Hourly payFull timeTemporary workInternshipImmediate startRemote workRelocation packageFlexible hoursShift work$4,530 - $5,207 per week
...weeks Shift Not Indicated Hours 5 X 8 Job Details Fusion Medical... ...of radioactive equipment at hospitals and research laboratories. They oversee the use of X-ray... ..., dental, and vision insurance with first day coverage ~ Paid Time Off (PTO) after 156...Temporary workShift work- ...effective use of radioactive equipment at hospitals and research laboratories. They oversee the use of X-ray machines and radiation to optimize radiation dose... ...medical, dental, and vision insurance with first day coveragePaid Time Off (PTO) after 1560 hoursLife and Short...Temporary work
- ...About the Software Security Researcher position We are looking for an experienced Security Engineer who will analyze our software... ...for new software solutions to help mitigate security vulnerabilities Participate in the team's work at all levels of the architecture...Full time
$4,500 - $5,800 per week
...Job Description At Citadel, our mission is to be the most successful investment team in the world. Machine Learning Researchers play a key role in this mission by developing next-generation models and trading approaches for a range of investment strategies. You'll get...Internship- ...required up to 75%. Ability to travel outside of normal working hours, including weekend travel. Telecommuting is allowed up to 30 days per year.QualificationsRequires a Bachelor’s degree, in environmental science, environmental planning, biology, ecology, or related...Work at officeLocal areaRemote workNight shift
$85.28k - $159.92k
...work lead to the same place.K&L Gates is seeking a skilled Senior Research Analyst with Intellectual Property research expertise to join... ...and Dismemberment)Health Advocacy ServicesPaid Time Off (25-30 days per year)Identity Protection/Restoration and Fraud InsuranceParental...Full timeTemporary workWork at officeLocal areaRemote workMonday to FridayWeekend workAfternoon shift- ...POSITION: Legal Research Analyst FLSA STATUS: Non-Exempt DEPARTMENT: Client Solutions Group SUPERVISOR: Director of Knowledge Management... ...into precise, actionable answers under tight deadlines. Beyond day-to-day reference support, the Analyst shapes how the Firm discovers...Work at officeWeekend work
- ...on the role of protein arginine methyltransferases (PRMTs). The Research Associate will support the senior researchers on various activities... ...-time employees Generous time off (holidays, preventative leave day, both vacation and sick time - all of which equates to around 37...Full timeFor contractorsWork at office
$60k - $65k
...Position Summary: The Claudio X. González Center for the U.S. and Mexico at Rice University’s Baker Institute for Public Policy seeks a Research Analyst to support rigorous, policy-relevant research on U.S.-Mexico issues through quantitative analysis, data management...Full timeWork at office$78.8k - $131.3k
...of commodities markets, providing companies with the data and intelligence to successfully navigate across global value chains every day. Our customers benefit from instant access to price assessments, reports and forecasts, a dedicated news channel and supply and demand...Full timeLocal area- ...UTHealth Houston's Neurology Department is hiring for a Postdoctoral Research Fellow to join their team of professionals. Our research... ...employees ~ Generous time off (holidays, preventative leave day, both vacation and sick time - all of which equates to around 37...Full timeFor contractorsTraineeship
- ...Job Title Research Associate Agency Texas A&M University Health Science Center Department IBT - CGPM - Ramos Proposed... ...to employee health and basic life premiums ~12-15 days of annual paid holidays ~ Up to eight hours of paid sick leave...Full timeFlexible hours
- ...Postdoctoral Research Fellow We are hiring a Postdoctoral Research Fellow (Full-time) to join the UTHealth Houston McGovern Medical School... ..., organizing experimental data, and supporting the laboratory's day-to-day operations. An ideal candidate should have a Bachelor's...Full timeFor contractors
- ...department located in the George and Cynthia Mitchell Basic Sciences Research Building at the world-renowned UT MD Anderson in the heart of... ...career development. • Employer-paid medical coverage starting day one for employees working 30+ hours/week, plus optional group...Hourly payFull timeTraineeshipWork experience placementLocal areaRelocation packageAfternoon shift
- ...We are hiring immediately for a Research Assistant III (full-time) to join the UTHealth McGovern Medical School, Department of OBGYN – Maternal... ...-time employees Generous time off (holidays, preventative leave day, both vacation and sick time – around 37-38 days per year) The...Full timeFor contractorsImmediate start
- ...To glorify God by serving our team, guests, and communities with excellence. CBAC does not offer visa sponsorship. Within three days of hire, applicants will be required to complete I-9 documentation and confirm authorization to work in the United States. If your...Work at officeRemote workWork from homeMonday to Friday
- ...Research Assistant IIUTHealth Houston's Psychiatry and Behavioral Sciences' AVENUE project is hiring a Research Assistant II. The Research... ...-time employeesGenerous time off (holidays, preventative leave day, both vacation and sick time – all of which equates to around 37...Full timeFor contractors
- ...and pharmacology of cell regulation and communication. Our major research themes include the molecular mechanisms and spatiotemporal... ...-time employees Generous time off (holidays, preventative leave day, both vacation and sick time – all of which equates to around 37...Full timeFor contractorsTraineeship
$143.69k - $229.9k
...over 50% of the Fortune 100, trust Conga when commercial complexity is high and global impact is on the line.Job Title: Staff UX Researcher Location: Houston, TX; Boston, MA (Hybrid) Reports to: Manager, User Experience Design A quick snapshot… As a Staff UX Researchers...Full timeImmediate startWorldwideFlexible hours- ...-time employees Generous time off (holidays, preventative leave day, both vacation and sick time - all of which equate to around 37-... ...§411.094. To the extent that a position requires the holder to research, work on, or have access to critical infrastructure as defined in...Full timeFor contractorsRemote workRelocation
$79.09k - $93k
...Senior Research Administration Associate - Clinical Trials Pre Award Division: Pediatrics Work Arrangement: Hybrid Location: Hybrid... ...onboarding, the position is a hybrid role typically working 2 days in office. Office hours are 8-5PM (+/- 1 hour). Employees with...Contract workWork at officeMonday to Friday$89.6k - $123.2k
...Job Description We have an exciting opportunity for a Research Scientist III at UL Research Institutes Electrochemical Safety Research Institute... ...that today’s global challenges require. Interesting work: Every day is different for us here. We see what’s on the horizon and use...WorldwideFlexible hours- ...Viridien’s Subsurface Imaging team, your primary responsibility as Research Geophysicist will be to develop new, innovative solutions to... ...limit is your potential!3 weeks’ vacation to recharge, 3 personal days and 8 sick days for you to use when you need it the mostA hybrid...Full timeRelocation packageFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to X-Day Offensive Research (XOR) Vulnerability Researcher. Be the first to apply!
- human factors researcher Houston, TX
- data collection researcher Houston, TX
- security researcher Houston, TX
- researcher Houston, TX
- music researcher Houston, TX
- design researcher Houston, TX
- machine learning researcher Houston, TX
- court researcher Houston, TX
- research and development Houston, TX
- outcomes research Houston, TX


