Security Researcher, Offensive Security

Job ID: Role Location: London Team: Technology Level: Experienced professional WFO: In office

CoreLatency is building a high-performance cloud infrastructure platform specialising in dedicated bare metal servers and rapidly provisioned virtual machines.

Our products include Bare Metal Cloud and Flash VMs, combining high-performance hardware, automated provisioning, virtualisation, software-defined networking and developer-focused APIs.

We are looking for a Security Researcher to identify vulnerabilities, challenge security boundaries and help secure our infrastructure against sophisticated attacks. Ideally you are a technically capable researcher who enjoys understanding how systems work and finding where their security assumptions break down.

You should be comfortable working independently, testing complex infrastructure and communicating directly with engineers.

We value demonstrated technical ability over certifications alone.

What we're looking for

• Conduct penetration testing and adversarial security research across our cloud infrastructure.
• Investigate hypervisor escapes, VM isolation weaknesses and cross-tenant vulnerabilities.
• Assess Linux hosts, container environments, network isolation and management interfaces.
• Test authentication, authorisation, APIs and customer-facing applications.
• Research vulnerabilities in open-source components and infrastructure software.
• Develop proofs of concept demonstrating security weaknesses.
• Conduct threat modelling and review infrastructure architecture.
• Evaluate security risks arising from AI agents, automated execution and LLM integrations.
• Document findings, assess impact and work with engineering to implement fixes.
• Support vulnerability disclosure and bug bounty triage.

Nice to have

• OSCP, OSEP, CREST CRT/CCT or equivalent offensive-security certification.
• Experience with KVM, QEMU, Firecracker or other virtualisation technologies.
• Knowledge of Linux namespaces, cgroups, seccomp, eBPF and kernel security.
• Experience with BGP, EVPN/VXLAN and software-defined networking.
• Familiarity with Kubernetes, container security and Cilium.
• Experience researching firmware, BMC/IPMI or bare metal provisioning vulnerabilities.
• Experience with vulnerability discovery, fuzzing or exploit development.
• Knowledge of LLM security, prompt injection and agentic tool-execution risks.
• Published security research, CVEs, conference presentations or recognised bug bounty findings.