The Application Security Researcher conducts deep reverse engineering on closed-source user-mode and kernel-mode applications, analyzing proprietary protocols, file formats, and compiled software primarily in C and C++. Responsibilities include synthesizing research into custom mitigation tools and documenting technical findings for both technical and executive stakeholders. Candidates must possess debugging competencies across userland and kernel environments, with malware analysis experience considered an advantage.
At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.
InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.
Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.
Responsibilities
- Conduct deep reverse engineering on closed-source applications
- Synthesis research findings into custom tools for mitigations of security issues.
- Clear documentation on technical findings, methodologies and strategy, and ensure effective communication across all levels, from technical staff to executive leadership.
Requirements
- Reverse engineer user-mode and kernel-mode compiled software (primarily C/C++) and reconstruct program logic, including type recovery and resolution of indirect or cross-module calls.
- Recover undocumented file formats, custom encodings, and proprietary network protocols; recognize common cryptographic primitives in stripped code.
- Competency in both userland and kernel debugging, including analysis of tamper-resistant and self-protecting software.
- Having malware analysis experience is an added advantage.
For a lead role, we're looking for candidates who has the demonstrated ability to:
- Perform deep kernel and driver debugging in complex cases (self-protected drivers, callback and IRP-level analysis, anti-debug-hardened code).
- Develop custom tools to recover the logic or emulate parts of the program.
- Reverse engineer sophisticated software and other programs compiled in newer languages such as Golang, Rust, newer Pythons and non-C binaries.
Benefits
- Training & Development
- Performance Bonus
- Medical Benefits
- Hybrid Work Arrangements
If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.
Unlock the full job description
Create a free account to read every duty and requirement, and to contact the employer directly.