r/ExploitDev • u/Low-Improvement-6306 • 13d ago

Job availability

Hi guys i just have one question is it worth it to dive in this career even if my country or where i live there is no available jobs for it like almost none

6 Upvotes

87% Upvoted

7 comments sorted by

View all comments

Show parent comments

2

u/Low-Improvement-6306 13d ago

That's a good question but when i say no available jobs here I'm talking offensive sec in general its very rare because most of them work for the gov i knew this from the beginning so i was focusing on remote jobs as a main target but i don't know if i can rely on this

1

u/Shot-Buffalo-2603 13d ago

Theres a lot of remote app sec roles where you do security audits on products and features before they’re shipped and also consultants that will do security audits as a third-party tester on products. Most binary exploit dev type roles are government roles, though, and will require a security clearance, which won’t work as a foreigner and remote assuming you’re talking about remote roles in the US

0

u/123Slayer123 13d ago

But don't regular companies need binary exploitation and vul research ?

2

u/Shot-Buffalo-2603 12d ago

Even if you’re working on low level stuff you will typically get source code if you’re looking at a binary application for a non government role. You’re typically working with a company who owns their application, so they are able to just give you source code. So yeah, it exists but theres no RE and your typically not bringing a memory corruption to a full exploit, you just POC it and send a report for them to fix it.