Vulnerability Research and Exploit Developer

Description

The role is an engineering position in vulnerability research and exploit development, supporting DoD and IA/IC needs by analyzing and exploiting mobile and network devices.

You will work inside an interagency facility alongside partners from other agencies, and integrate closely with Joint Cyber Operations Group (JCOG) staff so that missions run without disruption.

The work calls for strong analytical and problem-solving skills, clear written and verbal communication, and comfort with shifting priorities.

The company puts integrity and innovation first and works on missions tied to national safety.

Responsibilities

• Research vulnerabilities and write exploits for mobile and network devices in depth.
• Find and assess security flaws in complex systems, then propose practical fixes.
• Use AI models and AI-assisted workflows, such as LLM-assisted code analysis, reverse engineering and triage, to speed up vulnerability discovery and exploit development.
• Work with interagency partners and JCOG staff to meet mission goals.
• Build and maintain tools and scripts that detect and exploit vulnerabilities automatically.
• Fit your solutions into existing systems without disrupting ongoing operations.
• Advise and guide teammates, helping the team work well together.
• Keep clear records of research findings, exploit development steps and implementations.
• Keep up with cybersecurity, vulnerability research and exploit development.

Requirements

• Required: Hold a current TS/SCI clearance with a polygraph.
• Required: Hold a bachelor's degree in computer science, cybersecurity, engineering or a related field and have at least five years of relevant experience, or an equivalent mix of education and experience.
• Required: Have a proven record of finding and exploiting security weaknesses in mobile and network devices.
• Required: Be strongly proficient in C/C++, Python and assembly (ARM/x86).
• Required: Have experience with exploit development, reverse engineering and vulnerability assessment tools and frameworks such as IDA Pro, Ghidra, Binary Ninja, Frida, GDB/LLDB and QEMU.
• Required: Communicate excellently in writing and verbally.
• Required: Work independently with minimal oversight and function well within a team.
• Desired: A master's degree in a related field.
• Desired: Certifications such as OSCP, OSED/OSEE (Offensive Security exploit development) and GXPN or GREM (GIAC).
• Desired: Experience building fuzzing harnesses with AFL++, libFuzzer or honggfuzz and tracing crashes to their root cause.
• Desired: A deep understanding of memory-corruption classes (stack and heap overflow, use-after-free, type confusion) and of techniques for bypassing modern mitigations (ASLR, DEP/NX, stack canaries, CFI/CFG, PAC, application sandboxing).
• Desired: Proficiency in reverse engineering closed-source binaries and embedded firmware, using both static and dynamic analysis.
• Desired: Hands-on work with iOS and/or Android internals, including sandbox escape, kernel exploitation, baseband, and TrustZone/Secure Enclave, well beyond general familiarity.
• Desired: Published research, such as CVEs, Pwn2Own results, DEFCON or Black Hat talks, or competitive CTF placements.
• Desired: Experience with kernel-mode and low-level exploitation and OS internals (XNU, Linux, Windows), including drivers.
• Desired: Java or Kotlin for Android-focused vulnerability research. Rust or a similar memory-safe systems language is a plus.

Conditions

This is a full-time position.

You must attain and maintain a polygraph and a TS/SCI security clearance.

Travel is up to 10% and is local.

The position depends on funding and may not be filled right away. Similar roles are regularly open at the company, and applicants may be considered for other positions.

The proposed salary range is $113,200 - $237,800. Final pay depends on factors including location, Federal Government contract labor categories and wage rates, prior experience, skills, education and certifications.

The company applies equal-opportunity principles.

Benefits

• Competitive compensation, benefits, and learning and development opportunities.
• Comprehensive benefits including healthcare, wellness, financial support, retirement, family support, continuing education and time off.
• A flexible time-off benefit and access to learning resources.