CNO Software Developer

Gormat • Annapolis Junction, MD

1d • Onsite

About The Position

Gormat is seeking a CNO Software Developer to support specialized military cyber operations and national defense objectives. The role is part of a small team and focuses on applying offensive cyber expertise and rapid prototyping to evolving mission needs. The position is embedded with the mission team on-site at the customer location in Fort Meade/Columbia, Maryland, working with subject matter experts in C, Windows internals, and related low-level disciplines.

The developer collaborates with vulnerability researchers to gather information about proof-of-concept exploits and works with the customer to ensure solutions meet operational needs. The role also contributes to technical excellence through knowledge sharing, mentoring, design and code reviews, and continued development of skills in programming, Windows and Linux internals, and low-level engineering. A TS/SCI clearance with polygraph and USCC JQR qualification are required. Candidates with red/purple team experience and rapid prototyping skills are preferred over traditional software development backgrounds; defensive-only or network operations center experience is not considered sufficient.

Requirements

• USCC JQR qualified, with proven experience in offensive cyber operations or equivalent contract/civilian work.
• Bachelor's degree in a related field and 5+ years of experience in exploit/CNO tool development; alternatively, a related master's degree and 3+ years of such experience, or 4+ additional years of directly related exploit/CNO tool development experience in lieu of a degree.
• Proficiency with one or more of .NET, Python, C/C++, and ASM.
• Ability to analyze proof-of-concept exploits and CVE vulnerabilities and engineer them to be stable and testable.
• Technical operating-system knowledge in Linux or Windows.
• Ability to produce accurate documentation for developers and testers.
• TS/SCI clearance with polygraph.
• On-site work embedded with the customer in Fort Meade/Columbia, Maryland.

Nice To Haves

• 6–8 years of experience in exploit/CNO tool development.
• Experience with rapid prototyping and automation tooling.
• Networking protocol and testing expertise.
• Certification or training in one or more of Corelan Bootcamp/Advanced, ManTech ACTP Windows/Linux/VR&E, OSCP, OSED, OSWE, BCI Training, or USCC CCD Developer (Senior).
• Experience with Ghidra, GDB, WinDebug, or fuzzing.
• Prior offensive cyber operations, red/purple team activities, or equivalent contract/civilian experience.
• Red/purple team background and rapid prototyping skills.

Responsibilities

• Rapidly prototype advanced offensive cyber capabilities with senior engineers to address complex and evolving mission needs.
• Embed with the mission team on-site and work with subject matter experts in C, Windows internals, and related low-level disciplines.
• Collaborate with the vulnerability research team to gather relevant information on proof-of-concept exploits.
• Engage with the customer to ensure products meet operational needs.
• Share knowledge, mentor teammates, conduct design and code reviews, and continually develop technical skills.
• Apply offensive cyber expertise, including red/purple team operations, to develop and deliver mission-critical solutions.
• Analyze proof-of-concept exploits and CVE vulnerabilities and engineer solutions to be stable and testable.
• Generate accurate documentation for developers and testers.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior