About WebSec WebSec is a cybersecurity start-up based in Amsterdam. We specialize in a variety of offensive security services, including phishing campaigns, managed responsible disclosure services, threat hunting/red teaming, and penetration testing.
Job Responsibilities
<ul>
<li>Pentesting and auditing of software and hardware code.</li>
<li>Analyzing and reversing the execution flow of specific malware.</li>
<li>Conducting cryptographic vulnerability analysis.</li>
<li>Developing decryption software.</li>
<li>Researching vulnerabilities in ransomware.</li>
<li>Engaging in exploit research and development.</li>
</ul>
Skills Required
<ul>
<li>Master's or Ph.D. in a relevant technical field or a bachelor&rsquo;s degree combined with substantial real-world experience (preferably in Cryptography).</li>
<li>Minimum of 6 years of relevant experience in reverse engineering and/or security.</li>
<li>Familiarity with various attack techniques and a hacker's mindset.</li>
<li>Relevant offensive security certifications such as OSEP and OSED.</li>
<li>Practical experience in Security Operations, especially in pentesting software and mobile apps.</li>
<li>Experience in developing embedded systems.</li>
<li>Proficiency with debuggers like gdb, WinDbg, OllyDbg, and x64dbg.</li>
<li>Ability to read and write assembly languages (x86, x64, ARM, PPC, MIPS, etc.).</li>
<li>Experience in low-level programming language development or maintenance (e.g., ASM).</li>
<li>Knowledge of static or dynamic binary analysis techniques.</li>
<li>Experience with reverse engineering tools such as IDA Pro, Radare2, and objdump.</li>
<li>Expertise in developing binary instrumentation or source transformation tools.</li>
<li>Understanding of exploit mitigations like DEP, ASLR, and stack canaries.</li>
<li>Knowledge of ROP gadgets or other exploit programming methods.</li>
<li>Familiarity with OS internals, including device drivers and kernel development.</li>
<li>Expertise in the C programming language.</li>
<li>Strong communication skills in both written and spoken English. Dutch proficiency is a plus.</li>
</ul>
Nice-to-Have
<ul>
<li>Project management certifications, e.g., ITILv4 or Prince2.</li>
<li>Certifications like eCRE, GREM, GXPN.</li>
<li>CVE numbers related to ICS software or hardware vulnerabilities.</li>
<li>Proven record of responsible disclosures.</li>
<li>A GitHub portfolio showcasing security tools, exploits, or publications.</li>
<li>Red teaming experience.</li>
<li>Military SIGINT experience.</li>
</ul>
What We Offer
<ul>
<li>Opportunities for remote work.</li>
<li>A competitive hourly rate of &euro;100 all in excl VAT.</li>
<li>Flexible working hours.</li>
</ul>

Joël Aviad Ossi

A specialist who is able to analyze machine code of software and hardware to understand the information flow for the purpose of vulnerability research.

(Principal) Vulnerability Researcher / Reverse Engineer