HomeJobsHampshireItchen StokeCyber Software Vulnerability Engineer
Back to all jobs
⚡ Source: ReedRef: 56900113

Cyber Software Vulnerability Engineer

Forward Role·Itchen Stoke, Hampshire·Posted 1 week ago
Tailor my CV for this job — Free

Job description

Original text imported from Reed

As part of our client's expanding National Security division, you'll contribute to high-impact missions across AI/Data Science, Cybersecurity, Cloud, DevOps, and Platform Engineering. We're seeking inquisitive individuals who excel at dissecting technical systems, not just to understand how they work, but to identify weaknesses, assess risks, and develop mitigation strategies.



Cyber Software Vulnerability Engineer

Package - £45,000 - £65,000 (depending in experience level)

Benefits - DV Bonus plus excellent benefits

Clearance - Clearable to eDV level, SC clearance required to start.

Location - Hampshire


What You'll Be Doing

  • Software analysis and reverse engineering of compiled or interpreted code that could be obfuscated or defensively structured, for either x86/x64 or ARM processor architectures.
  • Reverse engineering a wide range of technologies to uncover vulnerabilities and improve security including operating systems and/or firmware internals, security architectures and hardware abstraction.
  • Engineering software from design to delivery in modern IDEs and languages, using Agile delivery.
  • Creating tested and testable code. Integrating with automated verification systems, CI and CD pipelines.
  • Working closely with cybersecurity teams to prioritize vulnerabilities and implement patching strategies.
  • Collaborating in Agile teams to deliver innovative, secure, and robust technical solutions.


What We're Looking For

  • Proficiency in one or more of C, C++, Java or C#.
  • Familiarity with scripting and automation using Python, Bash, Powershell or Groovy.
  • Experience working with IDA Pro or Ghidra for reverse engineering
  • Experience working with Linux or Windows-based systems.
  • Awareness of secure coding practices and modern cybersecurity threats.
  • Knowledge of principles used in Agile environments. 


Desirable exposure

Any exposure of AI, ML, Cloud or Virtualisation would be considered a plus.


Clearance required

Due to the nature of the clients' work, you will either already hold or are required to go through the eDV security clearance process. SC Clearance required to start

This is an incredible opportunity to be at the forefront of National Security innovation. If you're naturally curious, thrive in high-stakes environments, and want to make a real impact, apply today!


As an industry leading, nationwide Marketing, Digital, Analytics, IT and Design recruitment agency, we are continually receiving new assignments to work on, so keep a close eye on our website, Facebook, LinkedIn and Twitter pages for a full list of current permanent and interim opportunities as well as marketplace news and fun stuff.
Forward Role is operating as an employment agency.

SpeedCV AI

Key skills

AI-extracted from the job advert

Must-have skills
C/C++Java or C#PythonBash or PowerShellIDA Pro or GhidraLinux or Windows systemsSC clearance eligibilityAgile methodology
Nice-to-have
AI/ML exposureCloud technologiesVirtualisationGroovy scripting
Soft skills
Analytical thinkingProblem solvingCuriosityCollaborationAttention to detailCommunication
SpeedCV AI

Application advice

5 AI-generated recommendations to maximise your chances.

1

⭐ Highlight your reverse engineering experience with IDA Pro or Ghidra prominently as these are specifically mentioned tools

2

🔒 Emphasise any security clearance you hold or eligibility for eDV clearance as this is essential for the role

3

💻 Showcase specific examples of vulnerability discovery in x86/x64 or ARM architectures to match their technical requirements

4

🛡️ Detail your experience with secure coding practices and modern cybersecurity threat awareness

5

🤖 Mention any exposure to AI/ML, Cloud or Virtualisation technologies as these are desirable additions

NEW
AI SpeedCV

Suggested CV bullets

3 bullets our AI drafted for this specific advert, mirroring its ATS keywords.

How to tailor your CV

Add these 3 bullets under your most recent experience:

  • Reverse engineered 15 obfuscated malware samples using IDA Pro, identifying 8 zero-day vulnerabilities across ARM and x86 architectures within 6-week sprint cycles
  • Developed Python automation scripts for vulnerability scanning that reduced manual analysis time by 60% and integrated with CI/CD pipelines for 12 client projects
  • Collaborated with 4-person cybersecurity team to prioritise and patch 23 critical vulnerabilities, achieving 98% remediation rate within SLA timeframes

Free to copy — tailoring requires a 30-sec CV upload.

NEW
AI cover letter

Your cover letter is ready

We've drafted a cover letter for Forward Role. Preview the opening, then unlock the full personalised version.

Letter preview — tailored to Forward Role

Dear Hiring Manager,

Forward Role's National Security division represents exactly the high-impact cybersecurity work I want to pursue next. Your requirement for reverse engineering expertise using IDA Pro and vulnerability assessment across ARM architectures aligns perfectly with my technical background in secure software analysis.

My background in reverse engineering compiled code and developing mitigation strategies for modern cybersecurity threats would enable me to contribute immediately to your expanding team. I have hands-on experience with the C++ and Python stack mentioned in your requirements, plus familiarity with Agile delivery environments and CI/CD pipeline integration.

Get my personalised letter — free

Free signup, no card needed. Export to PDF/Word requires a £1.99 trial (14 days).

SpeedCV exclusive
SpeedCV AI

Interview questions

10 questions generated from this advert.

Technical

  • Walk me through your process for reverse engineering obfuscated code using IDA Pro or Ghidra
  • How would you approach vulnerability assessment for ARM vs x86/x64 architectures?
  • Describe your experience with CI/CD pipeline integration for security testing
  • What secure coding practices do you implement when developing in C++ or Python?
  • How do you prioritise vulnerabilities when working with cybersecurity teams?

Behavioural

  • Tell me about a time you discovered a critical vulnerability through reverse engineering
  • Describe a situation where you had to collaborate with multiple teams to implement security patches
  • How do you handle working under pressure in high-stakes security environments?
  • Give an example of when your curiosity led to an important security discovery
  • Describe a time you had to explain complex technical vulnerabilities to non-technical stakeholders
SpeedCV AINEW

STAR answer examples

Model answers using the Situation-Task-Action-Result framework. Adapt to your own experience.

1Question

Tell me about a time you discovered a critical vulnerability through reverse engineering

Situation: While analysing a client's firmware update for potential security flaws, I noticed unusual memory allocation patterns in the ARM-based embedded system. Task: I needed to determine if this represented a genuine vulnerability or benign code optimisation. Action: Using IDA Pro, I reverse engineered the compiled firmware and discovered a buffer overflow vulnerability in the authentication module that could allow privilege escalation. I documented the attack vector and developed a proof-of-concept exploit to demonstrate the risk. Result: The client patched the vulnerability before their product launch, preventing potential compromise of 50,000 deployed devices and saving an estimated £2.3 million in recall costs.
2Question

Describe a situation where you had to collaborate with multiple teams to implement security patches

Situation: Our vulnerability assessment revealed 12 critical flaws in a client's payment processing system, requiring coordination between development, operations, and compliance teams. Task: I needed to prioritise the vulnerabilities and ensure patches were implemented without disrupting live transactions. Action: I created detailed technical briefs for each team, ranking vulnerabilities by CVSS score and business impact. I worked with developers on secure coding fixes, guided operations on deployment strategies, and provided compliance documentation. We implemented a staged rollout over 3 weeks. Result: All critical vulnerabilities were patched with zero downtime, achieving PCI DSS compliance and preventing potential data breaches affecting 100,000 customer records.

Similar jobs

View all