Principal Vulnerability Engineer - Remote

Principal Vulnerability Engineer High-Growth Cybersecurity Scale-Up Fully Remote (UK)

• Remote - UK Based
• Up to £110,000 + benefits
• Permanent - Full time

Got a track record of 0-day discoveries, public CVEs, and a reputation for finding bugs that actually move the needle?

Join a research-driven, venture-backed cybersecurity scale-up trusted by Fortune 500 enterprises and critical infrastructure providers. Recognised by Gartner, $29M funded, and scaling fast worldwide.

As a Principal Vulnerability Engineer, you'll own the full vulnerability lifecycle - from discovery, through detection, to deployment - building production-grade tooling and pioneering LLM-powered offensive security workflows.

What you'll be doing:

• Leading deep research across 0-days and n-days, with patch diffing across source-available and binary-only targets
• Designing tooling for automated vulnerability discovery, exploit validation, and detection signature generation
• Architecting production-grade, LLM-powered research workflows
• Focusing on the vulnerabilities that matter - RCEs, auth bypasses, the bugs that change a client's risk posture overnight

What they're looking for:

• 5+ years of mixed vulnerability research and software engineering experience
• A demonstrable track record of original 0-day discovery - public advisories, CVEs, or equivalent
• Deep n-day research and patch diffing chops
• Confidence across both web and binary vulnerability classes
• Production-grade software engineering experience, ideally in Python
• Mastery of Burp Suite, Ghidra/IDA, debuggers, fuzzers
• Hands-on experience using LLMs in research workflows