Security Researcher

Role: Security Researcher

Location: Cheltenham office

Thanks for checking out our job opening; we are excited that YOU are interested in learning more about NCC Group.

We are on a mission to make society a safer and more secure place. Our people are the ones who make that possible; a global community of talented individuals working together towards a safer future.

We aim to create an environment where everyone can reach their full potential. We work together, we are brilliantly creative, we embrace difference and we want you to join in our mission, to make the world safer and more secure.

Take a look at our website here to learn more about why we’re one of the leading global Cyber Security and Risk Mitigation business…

https://www.nccgroup.com/uk/

The Opportunity:

Our Technical Security Assurance team in the UK is growing - we are looking for people of all grades (junior through to principal) with reverse engineering and/or vulnerability research experience to join us. You will become a member of the team working alongside colleagues with experience of the subject areas and clients. The work ranges from tactical short duration projects to research projects spanning months or even years.-The work involves solving interesting and often challenging problems.

The role will be primarily based out of our Cheltenham office, although there is possibility of a Hybrid working approach.

With our dedicated lab facilities and breakout areas, continuous training and variety of work and regular tech team/research events, we are positive that we can offer what you are looking for next in your career.

The Challenge

As a vulnerability researcher or reverse engineer specialising in long-term, deep-dive and challenging research engagements, you will be expected to work with our esteemed clients to help them solve complex security challenges.

This includes:

• Delivering technical tasks on our engagements

   

• Delivering high quality technical solutions to clients

   

• Using reverse engineering skills to solve complex and interesting problems

   

• Developing proof of concept outputs for the solutions

   

   

   

Skills

Some of the key skills we look for are:

•  Reverse Engineering (x86/ARM/PowerPC etc)

   

• Use of debugging tools (GDB/x64dbg/r2/windbg/frida etc)

   

•  Use of disassemblers for reverse engineering (IDA/Ghidra etc)

   

• Vulnerability Research

   

•  C Programming Experience

   

• Scripting Experience (Python/Perl etc)

   

•  Fuzzing

   

• Knowledge of Linux / Windows internals

   

• Networking and associated protocol knowledge and experience

   

• Applied security research

   

• Applied cryptography, mathematics or computer science experience

   

• Source code review

   

Technology Areas

The technology areas we encounter can be diverse, including:

• Mobile devices – Android and iOS

   

• Embedded system

   

• Windows and Linux

   

Behaviour's:

• Client-Focused: Prioritizes client needs and expectations, ensuring that all actions and decisions lead to client satisfaction and success.

   

• Collaborates as ‘One NCC’: Works in unison with all departments and teams, fostering a united front and shared objectives across the entire organisation.

   

• Adds Value: Goes beyond the minimum requirements to provide solutions and contributions that enhance the customer’s success and growth.

   

• Enables and Empowers: Provides tools, resources, and support to team members, fostering an environment where they can thrive and excel.

   

• Personal Responsibility: Takes ownership of actions, decisions, and outcomes, acknowledging successes as well as areas for improvement.

   

• Communicates Openly and Respectfully: Shares information transparently while maintaining

   

• respect and consideration for all stakeholders.

   

• Open Mindset: Embraces new ideas, diverse perspectives, and is willing to adapt in response to evolving situations or feedback.

   

• Growth and Development: Actively seeks opportunities for personal and professional growth, championing learning and evolution for oneself and the organisation.

   

• Analytical Thinking: Demonstrates a systematic approach to resolving issues and identifying

   

About NCC Group

The NCC Group family has over 2,200 members located all around the world, providing a trusted advisory service to 15,000 customers. Born in the UK, we have now have offices in North America, Canada, Europe, Asia- Pacific and United Arab Emirates.

We are passionate about helping our customers to protect their brand, value and reputation against the ever-evolving threat landscape. We fuel that passion with investment in our people and our business.

Our values and code of ethics are at the heart of how we operate – we work together, we are brilliantly creative and we embrace difference. We treat everyone and everything with equal respect.

We want to create an environment where all colleagues feel psychologically, emotionally and physically safe to be authentic, sharing their personal experiences to represent the diversity of the world they live in, and have equal opportunity to achieve their best.

About your application

We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.

If you do not want us to retain your details, please email global.ta@nccgroup.com. All personal data is held in accordance with the NCC Group Privacy Policy. We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement.