Principal Vulnerability Researcher

Date Posted:

2026-09-11

Country:

United Kingdom

Location:

Gloucester, South Gloucestershire

Position Role Type:

Hybrid

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. 

Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. We deliver solutions that help our nation and allies defend freedoms and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense.

Hybrid role – 3 days a week in the Gloucester office or customer sites.

Must already hold SC clearance & be able to gain an eDV clearance.

Role Overview
Raytheon UK’s Cyber Research Group (CRG) is seeking a highly skilled and analytically driven Vulnerability Researcher to support advanced research and development initiatives. The successful candidate will conduct in-depth technical investigations across hardware and software systems to identify security vulnerabilities, develop bespoke tools, and contribute to the discovery and analysis of emerging threats. This role requires a strong technical foundation, problem-solving ability, and the capacity to work collaboratively within multidisciplinary teams.

Key Responsibilities
·        Perform hardware and software teardowns, characterisation, and reverse engineering.

·        Conduct detailed analysis of platforms to identify security weaknesses, bugs, and potential exploits.

·        Examine network protocols and system behaviours to uncover vulnerabilities.

·        Collaborate with cross-functional teams to deliver innovative technical solutions and research outcomes.

·        Produce clear, structured documentation of findings, methodologies, and recommendations for both internal and external stakeholders.

·        Support business development efforts, including proposal writing and technical briefings.

Essential Skills and Experience
·        Proficiency in at least one programming language (C, C++, Python).

·        Familiarity with assembly language (reading or writing).

·        Experience in reverse engineering using tools such as IDA Pro, Ghidra, or Binary Ninja.

·        Strong knowledge of Linux-based systems, including command-line tools and system configuration.

·        Demonstrated analytical and problem-solving skills, with a methodical and inquisitive approach to technical challenges.

·        Solid understanding of network protocols.

·        Ability to rapidly learn and adapt to new technologies and domains.

·        Proven track record of identifying, analysing, and reporting vulnerabilities in complex systems.

Desirable Experience
·        Experience using or developing fuzzers.

·        Practical experience emulating hardware platforms with QEMU or similar tools to support security research and analysis.

·        Embedded software development for platforms such as ARM Cortex, AVR, or MIPS.

·        Familiarity with Radio Frequency (RF) systems and Software Defined Radios (SDRs), including 2G/4G/5G technologies and tools such as GNU Radio, Osmocom, srsRAN, or USRP.

·        Network engineering experience (professional or home lab).

·        Hardware development and prototyping, including PCB design and microcontroller programming.

#LI-SH1

RTX adheres to the principles of equal employment. All qualified applications will be given careful consideration without regard to ethnicity, color, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law.  

Privacy Policy and Terms:

Click on this link to read the Policy and Terms