March 28, 2021

How do I get into a career in vulnerability research/How to find a 0day to pad resume/Please read full post

I keep getting interviews for security roles but can’t pass them since they are at competitive companies. How do I stand out for product security roles? Right now I understand buffer overflow, ASLR, PIE, NX/DEP, ROP, fromat string and some heap. I think heap, kernel, and race conditions are areas I need to learn next. Should I learn CodeQL and start fuzzing(I have found some minor vulns but never in very large widely used code) or learn more security first? I am a sophmore in college and will be interning as a software engineer at Amazon this summer. My dream is to work for Google Project Zero or some other security research team.

Leave a Reply

Your email address will not be published. Required fields are marked *

Note: By filling this form and submitting your commen, you acknowledge, agree and comply with our terms of service. In addition you acknowledge that you are willingly sharing your email address with AiOWikis and you might receive notification emails from AiOWikis for comment notifications. AiOWiksi guarantees that your email address WILL NOT be used for advertisement or email marketting purposes.

This site uses Akismet to reduce spam. Learn how your comment data is processed.