Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 18 hours ago

Browser Vulnerability Researcher

CENSUS SA11 open roles

Where
Thessaloniki, Greece, Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowBrowser Vulnerability ResearcherCENSUS SA · Thessaloniki, Greece, Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CENSUS SA's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.8% of postings close within 7 days. Measured by our own scanner across the market. CENSUS SA postings stay open a median of 27 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.8%7 days
  4. 20.6%14 days
  5. 35.6%30 days
  6. 58.4%60 days
This job: posted 18 hours ago

CENSUS SA median: 27 days open

The posting

CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security assessment services to public and private organizations around the world, including international financial institutions and Fortune 500 companies. Powered by cutting-edge research, scientific analysis, and real-world engineering, we deliver unparalleled security assessment services for software, devices, infrastructure, and organizations. Learn more about CENSUS at census-labs.com.

About the Role

CENSUS is looking for a Vulnerability Researcher specializing in modern web browsers and browser exploitation.

The role focuses on identifying, analyzing, and demonstrating security vulnerabilities in complex browser components such as rendering engines, JavaScript engines, IPC systems, sandboxing mechanisms, and platform integrations.

Responsibilities

  • Research security vulnerabilities in modern browsers such as Firefox, Chromium-based and WebKit-based browsers.
  • Perform source-code auditing of large C/C++ codebases to identify memory-safety, logic, sandbox, and privilege-boundary vulnerabilities.
  • Investigate JavaScript engine internals such as V8, SpiderMonkey, or JavaScriptCore.
  • Analyze browser sandbox boundaries and investigate sandbox escape vulnerabilities.
  • Reverse engineer browser binaries and security-relevant operating-system components.
  • Debug crashes and memory-corruption issues using tools such as WinDbg, GDB, LLDB, AddressSanitizer, and related tooling.
  • Develop fuzzers, harnesses, and automation for vulnerability discovery.
  • Study exploit mitigations such as ASLR, DEP/NX, Control Flow Guard, CET, CFI, MTE/MIE, pointer authentication, and sandboxing.
  • Develop proof-of-concept exploits to validate vulnerabilities and understand their practical impact.
  • Produce clear technical reports describing vulnerability root cause, exploitability and affected components.

Required Skills

  • Strong knowledge of C/C++ and x64/aarch64 assembly.
  • Excellent understanding of memory management, pointers, object lifetime, and concurrency.
  • Strong knowledge of operating-system internals, particulary Android and iOS.
  • Experience with reverse engineering tools such as IDA Pro, Ghidra, Binary Ninja, or similar.
  • Familiarity with browser architecture and multi-process sandbox designs.
  • Experience analyzing large codebases.
  • Knowledge of common memory-corruption vulnerability classes and exploitation techniques.
  • Familiarity with debugging and sanitization tools such as ASan, UBSan, WinDbg, GDB, or LLDB.
  • Ability to independently investigate complex technical problems and document findings clearly.

Preferred Skills

Experience researching Chrome, Firefox, Safari.

Experience developing browser exploits or participating in vulnerability disclosure / bug-bounty programs.

Experience with coverage-guided fuzzing tools such as libFuzzer, AFL++, or custom fuzzing frameworks.

Familiarity with modern exploit-development techniques including heap manipulation, arbitrary read/write primitives, information leaks, and control-flow manipulation.

Knowledge of compiler-generated mitigations and browser hardening mechanisms.

What We Offer

Please note that some of the benefits listed below are applicable only to full-time employees in locations where CENSUS has a legal entity.

🌱 The chance to be part fast-growing, global cybersecurity company

🤝 A collaborative, purpose-driven team with a strong learning mindset

📈 Competitive salary and benefits, such as but not limited to:

🎂 Birthday Paid Day off

🍪 Coffee, lunch and office snacks free of charge

⚕️Private Medical and Life Insurance covering employees & family members

🎓 Funded certifications & postgraduate programs

🎁 Recognition programs including welcome gift, new year celebration gift, referral bonus and long service vouchers

🌍 Exposure to international teams, leaders, and challenges

💡 Opportunities for professional growth, development, innovation, and more!

📩 Apply today to start the conversation with People & Culture Team.

CENSUS is an equal opportunity employer. The Company does not discriminate on the basis of race, color, creed, pregnancy, religion, gender, national origin, age, disability, marital, or any other legally protected status. The Company also makes reasonable accommodations for disabled employees. Finally, the Company prohibits the harassment of any individual based on their protected status. This policy applies to all areas of personnel actions including recruitment, hiring, training, promotion, compensation, benefits, transfer, and social and recreational programs.

LI | Remote

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CENSUS SA's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on CENSUS SA's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    CENSUS SA's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.