About Company
Pioneering the next wave of digital defence, Career.zycto is a dynamic force in cybersecurity, committed to safeguarding critical infrastructure and data against evolving threats. For a Security Researcher, our environment offers unparalleled opportunities to delve into complex challenges, push boundaries, and innovate solutions. We champion a culture of continuous learning and empower our team to explore new attack vectors and develop defensive strategies that truly make an impact. Join us to collaborate with leading experts, contribute to ground-breaking projects, and shape the future of cybersecurity from our vibrant Leeds hub.
Job Description
Are you a driven and inquisitive Security Researcher eager to dissect the latest threats and fortify digital landscapes? Career.zycto is actively seeking a talented individual to join our innovative cybersecurity team in Armley, Leeds. In this pivotal role, you will be at the forefront of identifying, analyzing, and mitigating sophisticated vulnerabilities that target critical systems and applications. We believe in proactive defence, and your expertise will directly contribute to protecting our assets and those of our clients against an ever-evolving adversary.
You will immerse yourself in cutting-edge research, performing in-depth analysis of software, hardware, and network protocols to uncover hidden weaknesses. This isn’t just about finding bugs; it’s about understanding the entire attack surface, predicting future threats, and developing robust countermeasures. Our team thrives on intellectual curiosity, continuous learning, and a collaborative spirit. If you have a passion for reverse engineering, exploit development, and staying one step ahead of cybercriminals, then Career.zycto offers the challenging and rewarding environment you’ve been looking for. Join us and help build the next generation of secure systems.
Key Responsibilities
- Conduct vulnerability research and analysis across various platforms, including web applications, operating systems, embedded devices, and network infrastructure.
- Perform reverse engineering of malware and proprietary software to understand attack methodologies and develop detection signatures.
- Develop proof-of-concept exploits to demonstrate the impact of identified vulnerabilities and validate remediation efforts.
- Stay abreast of the latest threat intelligence, security trends, attack techniques, and adversary tactics, techniques, and procedures (TTPs).
- Contribute to the enhancement of security tools, frameworks, and methodologies.
- Collaborate with development and operations teams to integrate security best practices throughout the software development lifecycle (SDLC).
- Document research findings, vulnerability reports, and remediation recommendations clearly and concisely.
- Participate in incident response activities, providing expert analysis on complex security incidents.
- Mentor junior security engineers and contribute to the team's knowledge sharing initiatives.
Required Skills
- Proficiency in at least one scripting language (e.g., Python, PowerShell) and one compiled language (e.g., C/C++, Rust, Go).
- Strong understanding of network protocols, operating system internals (Windows, Linux), and security architectures.
- Demonstrable experience with vulnerability research, exploit development, and penetration testing methodologies.
- Familiarity with reverse engineering tools such as IDA Pro, Ghidra, OllyDbg, x64dbg.
- Experience with static and dynamic code analysis techniques.
- Knowledge of common web application vulnerabilities (OWASP Top 10) and mitigation strategies.
- Understanding of cryptographic principles and secure communication protocols.
- Excellent problem-solving skills and analytical thinking.
- Ability to communicate complex technical concepts effectively to both technical and non-technical audiences.
Preferred Qualifications
- Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related technical field.
- Relevant industry certifications (e.g., OSCP, OSWE, OSCE, CREST, SANS GIAC certifications).
- Experience with cloud security platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).
- Familiarity with threat modeling methodologies.
- Previous experience in a Security Operations Center (SOC) or incident response team.
- Active participation in CTFs, bug bounty programs, or security conferences.
- Publications or presentations on security research topics.
Perks & Benefits
- Competitive annual salary and performance-based bonuses.
- Comprehensive private medical and dental insurance.
- Generous pension scheme with company contributions.
- 25 days of annual leave plus bank holidays, with an option to purchase additional days.
- Dedicated budget for professional development, certifications, and conference attendance.
- Flexible working arrangements and a supportive work-life balance culture.
- Modern office environment in Armley, Leeds with excellent transport links.
- Regular team social events, hackathons, and knowledge-sharing sessions.
- Opportunity to work on challenging and impactful projects with cutting-edge technologies.
How to Apply
Ready to make a tangible impact in the cybersecurity landscape? We invite you to explore this exciting opportunity. Please click on the application link below to submit your CV and a cover letter detailing your relevant experience and why you are passionate about security research. We look forward to reviewing your application and potentially welcoming you to the Career.zycto team.
