Vulnerability Researcher
Vulnerability Researcher
Posted 2 days ago
SENIORITY
Lead
About the role
- Conduct advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development.
- Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
- Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
- Develop proof-of-concept exploits to validate vulnerability findings and assess operational utility.
- Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
- Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.
- Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.
- Collaborate with capability development teams to translate vulnerability research into operational tools.
- Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
- Conduct limited TDY travel as mission requires.
- What Required Skills You'll Bring:
- Bachelor's degree in related technical field and 10+ years of related professional experience; Master's degree and 8+ years.
- Expert proficiency with disassemblers/decompilers (IDA Pro, Ghidra, Binary Ninja)
- Strong understanding of x86/x64/ARM assembly language and processor architectures
- Practical experience with debuggers (WinDbg, GDB, LLDB) and dynamic analysis tools
- Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust applications)
- Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions)
- Proficiency with fuzzing frameworks such as AFL, lib
- Fuzzer, Honggfuzz and corpus management
- Strong scripting skills (Python, Ruby, or similar) for automation and analysis
- Experience documenting technical research for both technical and operational audiences
- Active TS/SCI with PolyWhat Desired Skills You'll Bring:
- Experience with Windows kernel/driver reverse engineering
- Firmware analysis and embedded systems reverse engineering
- Network protocol analysis and vulnerability research
- Experience with UEFI/BIOS or bootloader security analysis
- Published vulnerability research (CVEs, conference presentations, blog posts)
- Familiarity with symbolic execution and taint analysis tools
- Understanding of offensive cyberspace operations workflows
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
