CNO Software Developer

Gormat • Annapolis Junction, MD

3h • Onsite

About The Position

Gormat is seeking a CNO Software Developer to support specialized military cyber operations. The role is part of a small team and applies offensive cyber expertise and rapid prototyping to a national security mission. The developer will work on-site with the mission team and collaborate with subject matter experts, vulnerability researchers, and the customer to deliver operationally useful capabilities. The position requires USCC JQR-qualified personnel with proven offensive cyber experience. TS/SCI clearance with polygraph is required. The position is based at the customer site in Fort Meade/Columbia, Maryland.

Requirements

• USCC JQR qualification and proven experience in offensive cyber operations or equivalent contract/civilian work.
• Bachelor's degree in a related field and 5+ years of exploit/CNO tool development experience; alternatively, a master's degree in a related field and 3+ years of such experience; or 4+ additional years of directly related exploit/CNO tool development experience in lieu of a degree.
• Proficiency with one or more of .NET, Python, C/C++, and/or ASM.
• Ability to analyze proof-of-concept exploits or CVE vulnerabilities and engineer them to be stable and testable.
• Technical operating-system knowledge in Linux or Windows.
• Ability to generate accurate documentation for developers and testers.
• TS/SCI clearance with polygraph.
• Defensive-only or network operations center experience is not sufficient for this role.

Nice To Haves

• 6–8 years of experience in exploit/CNO tool development.
• Experience with rapid prototyping and automation tooling for advancing rapid outcomes.
• Networking protocol and testing expertise.
• Certification or training in one or more of: Corelan Bootcamp/Advanced, ManTech ACTP Windows/Linux/VR&E, OSCP, OSED, OSWE, BCI Training, or USCC CCD Developer (Senior).
• Experience with Ghidra, GDB, WinDebug, or fuzzing.
• Prior experience in offensive cyber operations, red/purple team activities, or equivalent contract/civilian work.
• Red/purple team background and rapid prototyping skills.

Responsibilities

• Rapidly prototype advanced offensive cyber capabilities with senior engineers to meet evolving mission needs.
• Embed with the mission team on-site and work with subject matter experts in C, Windows internals, and related low-level disciplines.
• Collaborate with the vulnerability research team to gather information about proof-of-concept exploits.
• Engage with the customer to ensure products meet operational needs.
• Share knowledge, mentor teammates, conduct design and code reviews, and continually develop technical skills in programming, Windows internals, Linux internals, and low-level engineering.
• Apply offensive cyber expertise, including red/purple team operations, to develop and deliver mission-critical solutions.
• Generate accurate documentation for developers and testers.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior