Principal Security Researcher

Mindbox is a tech-driven company connecting top IT talents with technology projects for leading enterprises across Europe.

• Proven experience in delivering highly sensitive cybersecurity research projects.
• Deep expertise in vulnerability discovery and exploit development (0-day, vulnerability disclosure).
• Skilled in reverse engineering, fuzzing, penetration testing, black-box and source code review.
• Knowledge of software security, system architecture, and mobile security (Android, iOS).
• Experience with hardware hacking and wireless technology.
• Strong programming background and automation experience.
• Familiarity with AI for security research, leveraging and training AI models for vulnerability discovery and validation.
• Solid understanding of Linux, Windows, Android, and iOS platforms.
• Exceptional analytical and problem-solving abilities, coupled with clear communication skills.
• Degree in Computer Science or equivalent experience.
• Active participation in cybersecurity industry and vulnerability disclosure programs is a plus.

Preferred Certifications & Skills:

• Offensive Security, CREST, or relevant advanced security certifications.
• Hands-on experience with security for AI systems, LLM security risks, and GenAI exploitation models.

• Lead security research projects targeting critical systems and services.
• Perform advanced 0-day vulnerability discovery, exploit development, reverse engineering, and fuzzing.
• Analyze and interpret the evolving threat landscape, delivering actionable insights.
• Engage with cybersecurity leads, technology functions, and global business teams to ensure risk reduction.
• Drive automation, tooling, and AI-driven innovation (e.g., applying GenAI, LLMs, and AI for Security in vulnerability discovery and validation).
• Support security testing of emerging technologies, mobile platforms, wireless protocols, and hardware.
• Maintain strong collaboration with Offensive Security and Cybersecurity Engineering teams.
• Produce security research outputs and articulate business risk impact to senior stakeholders.

#LI – Hybrid: 6x/msc from the office in Kraków