Principal Vulnerability Engineer - Remote

Principal Vulnerability Engineer | High-Growth Cybersecurity Scale-Up | Fully Remote (UK) • Remote – UK Based • Up to £110,000 + benefits • Permanent – Full time Got a track record of 0-day discoveries, public CVEs, and a reputation for finding bugs that actually move the needle? Join a research-driven, venture-backed cybersecurity scale-up trusted by Fortune 500 enterprises and critical infrastructure providers. Recognised by Gartner, $29M funded, and scaling fast worldwide. As a Principal Vulnerability Engineer, you’ll own the full vulnerability lifecycle – from discovery, through detection, to deployment – building production-grade tooling and pioneering LLM-powered offensive security workflows. What you’ll be doing: • Leading deep research across 0-days and n-days, with patch diffing across source-available and binary-only targets • Designing tooling for automated vulnerability discovery, exploit validation, and detection signature generation • Architecting production-grade, LLM-powered research workflows • Focusing on the vulnerabilities that matter – RCEs, auth bypasses, the bugs that change a client’s risk posture overnight What they’re looking for: • 5+ years of mixed vulnerability research and software engineering experience • A demonstrable track record of original 0-day discovery – public advisories, CVEs, or equivalent • Deep n-day research and patch diffing chops • Confidence across both web and binary vulnerability classes • Production-grade software engineering experience, ideally in Python • Mastery of Burp Suite, Ghidra/IDA, debuggers, fuzzers • Hands-on experience using LLMs in research workflows