Find the flaw. Prove the impact.

Research with a clear outcome

Our work runs from discovery through exploitability validation and coordinated disclosure. We investigate enterprise applications, industrial systems, connected devices and complex file formats, using reverse engineering, source review and targeted tooling.

The aim is to understand the flaw, demonstrate its security impact, and give the vendor actionable evidence. Our public advisories and technical write-ups show that work in practice.

What you bring

We’re interested in researchers who can take an unfamiliar target apart and explain what they find. Depth in a relevant area matters; you don’t need experience across every platform we investigate.

• Independently investigate software and trace findings to their root cause.
• Assess exploitability and build reproducible proof-of-concept code.
• Develop or adapt tools that move an investigation forward.
• Communicate evidence, limitations and technical decisions clearly.

Published research, tooling and detailed technical write-ups are useful ways to show your approach. If your work is confidential, a sanitised description of your experience is welcome.

The practical details

TecSecurity is based in Melbourne, Australia. Our practice combines independent vulnerability research with client source code review and penetration testing.

We’re welcoming introductions for future research opportunities. Role scope, the balance of research and client work, location eligibility, employment or contract arrangements, and compensation will be discussed for each opportunity. Research attribution, publication, ownership and outside projects are also part of that conversation.