JPMorgan Chase
X-Day Offensive Research (XOR) Vulnerability Researcher
$133K–$260K
Jersey City, NJ +9 · Full-time · Posted Oct 8, 2026
- Location
- Jersey City, NJ
Washington, DC
Chicago, IL
Plano, TX
Houston, TX
Tampa, FL
Atlanta, GA
Wilmington, DE
McLean, VA
Columbus, OH - Experience
- 5+ years in cybersecurity or resiliency; preferred: 5+ years in vulnerability research and exploit development.
- Education
- Bachelor’s degree in computer science, PhD in a related technical field, or equivalent combination of education and/or experience in a related field.
About the job
Conduct offensive security assessments and vulnerability research, developing and validating exploits and recommending improvements to the firm's cybersecurity and resiliency posture.
What you'll do
- Design and execute penetration tests, technical assessments, cyber exercises, or resiliency simulations; refine assessment methods and tools.
- Research vulnerabilities, reverse engineer binaries, develop proof-of-concept exploits, and validate N-day vulnerabilities.
- Report findings, risks, and remediation recommendations; collaborate with teams on vulnerability triage and patch prioritization.
What they ask for
- 5+ years of experience in cybersecurity or resiliency, including planning and coordinating offensive security testing or assessments.
- A record of discovering CVEs in at least one listed target category.
- Hands-on vulnerability research, exploit development, coordinated disclosure, and vulnerability mitigation experience in open-source projects.
- Expertise in advanced binary and code analysis, exploit techniques, and the internals of at least two operating systems.
Nice to have
- Experience using listed fuzzing or program analysis tools.
- Experience with embedded platform emulation or kernel and low-level operating system development.
Pay
USD 156,750.00-260,000.00 base salary (Jersey City, NJ); USD 156,750.00-260,000.00 base salary (Washington, DC); USD 133,000.00-225,000.00 base salary (Chicago, IL); USD 156,750.00-260,000.00 base salary (McLean, VA)
Tools
IDA Pro, Ghidra, Binary Ninja, WinDbg, GDB, RR, C/C++, Java
Model-written summary · the original posting is authoritative