Vulnerability Researcher (Software)

Searchability NS&D
Cheltenham, United Kingdom
Today
£65,000 – £85,000 pa

Salary

£65,000 – £85,000 pa

Job Type
Permanent
Work Location
Hybrid
Seniority
Mid
Education
Degree
Security Clearance
Required
Posted
2 Jun 2026 (Today)

Benefits

Compressed working week option (4 or 4.5 days) Annual bonus scheme Enhanced family friendly and sick pay policies Access to flexible benefits including health and wellbeing options Additional cash bonus opportunities

Vulnerability Researcher - Cheltenham, UK

  • Base salary up to £85,000 depending on experience
  • Hybrid working, average 3 days onsite per week
  • Active SC clearance required minimum

About the client

Our client is a highly respected UK organisation delivering advanced cyber and security research for critical national programmes. They invest heavily in innovation, technical excellence, and long-term capability building. Due to continued growth in specialist research projects, they are now looking to appoint an experienced Vulnerability Researcher.

The benefits

  • Compressed working week option (4 or 4.5 days)
  • Annual bonus scheme
  • Enhanced family friendly and sick pay policies
  • Access to flexible benefits including health and wellbeing options
  • Additional cash bonus opportunities

The Vulnerability Researcher role

As a Vulnerability Researcher, you will carry out deep technical research into complex software systems, identifying vulnerabilities and exploring novel attack techniques across modern platforms.

You will work closely with multidisciplinary teams to design prototypes, test hypotheses, and document findings that directly influence future cyber capabilities.

Key responsibilities include:

  • Reverse engineering of software binaries and applications
  • Conducting vulnerability research across operating systems, applications, and network services
  • Developing proof of concepts and exploits to demonstrate impact
  • Analysing system behaviour, APIs, and network protocols to uncover security weaknesses
  • Fuzzing and dynamic analysis of software to identify unknown vulnerabilities
  • Contributing to tool development to support vulnerability discovery and analysis
  • Producing clear technical documentation for a range of stakeholders

Vulnerability Researcher essential skills

  • Previous experience in software vulnerability research or exploit development
  • Solid programming skills with C, C++, Python, or similar
  • Experience with reverse engineering tools such as Ghidra, IDA Pro, or Binary Ninja
  • Understanding of operating system internals, particularly Linux or Windows
  • Experience with debugging tools and techniques

Desirable experience

  • Experience in exploit mitigation bypass techniques (ASLR, DEP, sandbox escape)
  • Familiarity with fuzzing frameworks and automated testing approaches
  • Exposure to network protocols and distributed systems
  • Scripting or automation experience for vulnerability discovery workflows
  • Knowledge of secure software development practices
  • Experience working in research led or highly technical environments

Key skills

Vulnerability Researcher, software security, reverse engineering, exploit development, Linux, Windows internals, fuzzing, C, C++, Python, cyber research, NSD

Related Jobs

View all jobs

Vulnerability Researcher (Software)

Searchability NS&D Cheltenham, United Kingdom
£65,000 – £85,000 pa Hybrid Clearance Required

Cyber Vulnerability Researcher

Searchability NS&D Gloucestershire, United Kingdom
£60,000 – £80,000 pa On-site Clearance Required

Senior Threat Researcher (UK)

Sophos United Kingdom
Remote

Sr. Security Researcher , DEU)

CrowdStrike Bigton, Alba / Scotland, ZE2 9GA, United Kingdom
Remote

Sr. Security Researcher , DEU)

CrowdStrike London, E10 6AP, United Kingdom
Remote

Sr. Security Researcher , DEU)

CrowdStrike Germany
Remote

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Where to Advertise Cyber Security Jobs in the UK (2026 Guide)

Where to advertise cyber security jobs UK in 2026: the specialist boards, communities and channels that reach offensive, defensive and GRC security talent. The candidate pool is small, heavily vetted and in high demand across government, financial services, critical national infrastructure and the private sector simultaneously. Many of the strongest candidates hold active security clearances, are not actively job-searching through general platforms, and move primarily through specialist networks and trusted referrals. General job boards reach a broad audience but lack the specificity that security professionals expect. Specialist platforms, government-affiliated channels and cleared candidate networks each serve a different part of the market. This guide, published by CybersecurityJobs.tech, covers where to advertise cyber security roles in the UK in 2026, how the main platforms compare, what employers should expect to pay, and what the data says about hiring across different role types.

Cyber Security Jobs UK 2026: What to Expect Over the Next 3 Years

Cyber Security Jobs UK 2026: roles, salaries and the threat intelligence, cloud security and zero-trust hiring trends shaping UK cyber careers. Cyber security is one of the few sectors where demand for talent has never once dipped. Every major technological shift of the past decade — cloud migration, remote working, AI adoption, the proliferation of connected devices — has expanded the attack surface that security professionals are expected to defend. And every expansion of that attack surface has generated more jobs. But the cyber security jobs market of 2026 is not simply a larger version of what it was three years ago. It is a structurally different market. The threats have evolved, the technologies used to combat them have changed, the regulatory environment has tightened considerably, and the roles being created reflect all of that. A job seeker who understands only the cyber security landscape of 2023 is already working with an outdated map. The candidates who will thrive over the next three years are those who understand where the sector is heading — which specialisms are attracting the most investment, which technologies are reshaping defensive and offensive security practice, and how the definition of a cyber security professional is broadening well beyond the traditional image of a network defender in a SOC. This article breaks down what the UK cyber security jobs market is likely to look like through to 2028 — covering the titles emerging right now, the technologies driving employer demand, the skills that will matter most, and how to position your career ahead of the curve.