Senior Vulnerability Researcher

Key Responsibilities

Apply a variety of VR techniques—including fuzzing, RE, and online research—to identify vulnerabilities and determine exploitability.

Develop proof-of-concept software and creative solutions to meet diverse customer requirements.

Perform vulnerability assessments of secure technologies to determine if protected or inaccessible information is recoverable.

Manage customer expectations by implementing proactive feedback mechanisms and providing technical insights.

Prepare and deliver concise presentations and reports summarizing research findings for technical and non-technical stakeholders.

Collaborate with internal and external stakeholders to identify and communicate operational requirements.

Shape Computer Architecture (CA) requirements to ensure they align with broader operational goals.

Synthesize technical and operational information to develop innovative solutions for complex cyber challenges.

Mentor junior personnel, providing technical guidance and fostering a culture of continuous learning.

Required Experience/Clearance

Active TS/SCI security clearance.

Seven (7)+ years of professional experience in vulnerability research.

Proven expertise in programming within contemporary Windows and Linux/Unix environments.

Proficiency in multiple languages including C, C++, Java, and JavaScript.

Extensive experience using reverse engineering tools such as IDA Pro, OllyDbg, and Windbg.

Demonstrated experience reverse engineering Windows/Linux applications and OS kernel modules.

Exceptional written and oral communication skills, with the ability to explain complex technical concepts clearly.

Desired Experience

Experience with network protocol analysis and deep-packet inspection.

Static and dynamic malware analysis experience for mobile platforms, specifically iOS and Android.

Knowledge of software engineering with a focus on workflow automation for existing security tools.

Proficiency in identifying discreet, complex communications technologies that support investigative techniques.

Advanced Vulnerability Exploitation (VE) capabilities, including understanding the relationship between analysis concepts and computational resource requirements.