Bitdefender
Vulnerability Researcher
Bucharest, Romania· HYBRID
About the role
You choose research targets, build the tooling to test them at scale (typically fuzzing harnesses), run those campaigns over days or weeks, and analyse the crashes that come out to determine which are exploitable. Most results are not security-relevant; the role exists for the small proportion that are. Confirmed findings are taken through coordinated disclosure with the vendor until a fix is released.
What you will do
- Choose targets and justify the choice
- Build fuzzing harnesses and the triage around them
- Take findings through coordinated disclosure to a fix
What they ask for
- Reverse engineering in a real disassembler
- C and one systems language
- A credited CVE, or work you can walk through in equivalent depth
Nice to have
- Exploit development
- Kernel or browser internals
- Conference talks
What applying with Rooted means
This role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.
Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.
You can read this role without an account. To apply you need a Rooted credential.
This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Bitdefender. Confirm the final details with the original source or during the application process.
Posted 2026-08-13