Browser - Vulnerability Researcher

- Renderer-reachable attack surfaces in Chromium, with room to work on WebKit or Firefox where relevant.

- Memory-corruption and logic vulnerabilities in V8, Blink, WebAssembly, DOM bindings, parsers, media, graphics and adjacent C/C++ components.

- Exploitation under modern constraints including pointer compression, heap isolation, control-flow protections and the V8 Sandbox (formerly commonly referred to as the Ubercage).

- Variant analysis, patch diffing and adjacent-code research rather than stopping after a single bug.

- Collaboration with sandbox, platform and kernel researchers when a renderer issue is part of a larger chain.

- Original browser vulnerabilities with a clear root cause and reliable reproduction.

- Working exploit primitives or chain components that survive realistic release-build mitigations.

- Minimised test cases, exploitability analysis, affected-version notes and reproducible research environments.

- Readable exploit code and technical documentation that another senior researcher can pick up and extend.

- Tooling that improves fuzzing, instrumentation, crash triage, variant hunting or exploit-development speed.

- A proven record of delivering browser vulnerabilities or exploit components against modern browser releases.

- Deep practical knowledge of Chromium internals, ideally including both the renderer and V8.

- Strong C/C++ debugging, reverse engineering and source-audit skills.

- Hands-on experience turning use-after-free, type confusion, out-of-bounds access or related bug classes into useful primitives.