Senior Vulnerability Researcher & Reverse Engineer
About The Position
Agile Defense is seeking a Vulnerability Researcher/Reverse Engineer to conduct advanced vulnerability research and reverse engineering on target software and hardware systems, identifying exploitable weaknesses for cyberspace capability development. The role is located in Fort Meade, Maryland, and requires an active TS/SCI clearance with CI Poly. The researcher will analyze target platforms and architectures, discover vulnerabilities using fuzzing and code analysis, reverse engineer software, firmware, and hardware, and develop proof-of-concept exploits to validate findings. The role also involves documenting technical findings and exploitation methods, briefing capability developers, collaborating to translate research into operational tools, tracking relevant vulnerability disclosures and adversary tradecraft, and applying offensive cyber expertise. Limited TDY travel may be required as the mission requires.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field; alternatively, a master’s degree with 8+ years of related professional experience.
- 10+ years of related professional experience; alternatively, a master’s degree and 8+ years of related professional experience.
- Proficiency with disassemblers/decompilers such as IDA Pro, Ghidra, and/or Binary Ninja.
- Strong understanding of x86/x64/ARM assembly language and processor architectures.
- Practical experience with debuggers such as WinDbg, GDB, and/or LLDB, and dynamic analysis tools.
- Demonstrated capability discovering vulnerabilities in compiled software, including C/C++/Rust applications.
- Understanding of common vulnerability classes, including memory corruption, logic flaws, and race conditions.
- Proficiency with fuzzing frameworks such as AFL, libFuzzer, and Honggfuzz, and corpus management.
- Strong scripting skills in Python, Ruby, or a similar language for automation and analysis.
- Experience documenting technical research for technical and operational audiences.
- Active TS/SCI with Poly clearance.
Responsibilities
- Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
- Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
- Discover vulnerabilities through automated fuzzing, manual code review, and dynamic and static analysis techniques.
- Rapidly prototype proof-of-concept exploits to validate vulnerability findings and assess operational utility.
- Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
- Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.
- Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.
- Collaborate with capability development teams to translate vulnerability research into operational tools.
- Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
- Apply offensive cyber domain expertise, including red/purple team operations, to develop and deliver mission-critical solutions.
- Conduct limited TDY travel as mission requires.
Benefits
- Health insurance
- Life insurance
- Paid time off
- Holiday pay
- Short-term disability
- Long-term disability
- Retirement benefits
- Learning and development opportunities
- Optional benefit elections
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
