Lead Security Researcher, NCC Group
Leading cyber security & managed services
Open for applications
Leading cyber security & managed services
1001+ employees
Open for applications
1001+ employees
Company mission
To help keep customers safe and secure.
Role
Who you are
- Strong knowledge of vulnerability research and exploitation techniques
- Experience with major CPU architectures and operating systems or platforms
- Ability to reverse engineer software written in both unmanaged and managed languages
- Understanding of common programming languages, vulnerability classes and exploitation methods
- Knowledge of modern exploitation mitigations and approaches for bypassing them
- Ability to research and exploit unfamiliar instruction sets, programming languages and platforms
- Clear written communication skills for documenting and presenting complex technical findings
What the job involves
- A Lead Security Researcher within the Exploit Development Group (EDG) is responsible for conducting high‑impact vulnerability research and exploit development that advances the state of the art in cybersecurity
- The role contributes directly to NCC Group’s reputation as a global authority in security research by delivering original research with deep technical expertise and representing the organisation externally through publications, presentations, and industry engagement
- Through both long‑term strategic research and short‑notice tactical support, this role helps protect clients, strengthen NCC Group services and shape the wider security community
- Reporting To: Alexander Plaskett
- Conduct vulnerability research and exploit development across a range of platforms, architectures, and technologies
- Deliver high‑quality vulnerabilities and reliable exploits as part of strategic research programmes
- Provide short‑notice tactical support to consulting, professional, and managed services teams in areas such as reverse engineering and exploit development
- Advance exploit development techniques and contribute to world‑leading security research
- Participate in vulnerability research and exploit development competitions, such as Pwn2Own
- Publish research findings and support their internal and external promotion through articles, whitepapers, presentations, and conference talks
- Act as a subject matter expert within NCC Group, mentoring and supporting colleagues who are developing skills in vulnerability research and exploitation
- Collaborate effectively with multi‑disciplinary teams to deliver research and client outcomes to the highest possible standard
Salary benchmarks
Our take
NCC Group is a global cyber and software resilience businesses that assesses, develops and manages cyber threats. The company operates across multiple sectors, geographies and technologies but with the universal mission of communicating the best ways to keep businesses, software and personal data safe.
As we become more entrenched in the digital age, businesses are more vulnerable to cyber-related risk, and this is where NCC Group comes in. Its services work to make the Internet safer and to change the way that organisations think about cyber security. It continues to build momentum as our society becomes increasingly connected but more uncertain.
NCC Group's role is only set to grow too. As technology evolves and cyber threats become more sophisticated, businesses and individuals will need trusted partners to navigate the risks. NCC Group's expertise, global reach, and proactive approach puts it in a position to help organisations not only respond to threats, but to stay ahead of them.
Steph
Company Specialist at Welcome to the Jungle
Insights
-4% employee growth in 12 months
Company
Company HQ
Spinningfields, Manchester, UK
Leadership
Mike Maddison
(Group CEO)Former head of EY’s cyber security, privacy, and trusted technology practice for EMEA. Previously led PwC’s Risk Services practice across the Middle East and before that was head of Deloitte’s cyber security consultancy in EMEA.
Share this job
View 16 more jobs at NCC Group