Principal Vulnerability Researcher

Nightwing Intelligence Solutions•Annapolis Junction, MD

2d•Onsite

About The Position

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets. This position is an onsite role.

Requirements

Must have a current TS/SCI with CI polygraph security clearance.
All candidates must be US citizens.
Typically requires a Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field at 10 years of practical experience in a technology-related environment.
Solid understanding of software development.
Knowledge in C, C++, or Python.
Experience with program analysis, reverse engineering, and debugging tools (e.g., angr, BAP, IDA Pro, Binary Ninja, gdb, Ghidra, windbg).
Knowledge of Windows or Linux.
Knowledge of Assembly (x86/x64).

Nice To Haves

Understanding of OS Internals (any major OS).
Experience with exploit development, Hack The Box, etc…
Experience reading or writing assembly.
Understanding of network protocols, application layer, be able to read/write socket code.
Understanding of exploit mitigations such as DEP and ASLR.
Relevant Cybersecurity Certifications (e.g. oscp, oscE, OSWP, OSEP, OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP).

Responsibilities

Use advanced systems to find zero-day (O-day) vulnerabilities.
Responsible for analyzing, designing, and identifying programmatic behaviors.
Have an opportunity to develop, test, and debug software applications.
Research data and provide new design ideas for vulnerability techniques.
Understand terminologies like debugging and fuzzing and applying it into your work.