Sr. Principal Reverse Engineering/Vulnerability Research Engineer

Clarity Innovations•Rome, NY

About The Position

Clarity Innovations is a trusted national security partner, dedicated to safeguarding our nation’s interests and delivering innovative solutions that empower the Intelligence Community (IC) and Department of Defense (DoD) to transform data into actionable intelligence, ensuring mission success in an evolving world. Our mission-first software and data engineering platform modernizes data operations, utilizing advanced workflows, CI/CD, and secure DevSecOps practices. We focus on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring, enabling end-to-end solutions that drive operational impact. We are committed to delivering cutting-edge tools and capabilities that address the most complex national security challenges, empowering our partners to stay ahead of emerging threats and ensuring the success of their critical missions. At Clarity, we are people-focused and set on being a destination employer for top talent, offering an environment where innovation thrives, careers grow, and individuals are valued. Join us as we continue to lead innovation and tackle the most pressing challenges in national security.

Requirements

Secret security clearance with the ability to obtain and maintain a TS/SCI security clearance; U.S. citizenship is required.
Bachelor’s degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline, or equivalent experience, and a minimum of 7 years of prior relevant experience.
Advanced knowledge of vulnerability research and reverse engineering, with demonstrated ownership of complex investigations and technically sound research outcomes.
Experience using Ghidra, Binary Ninja, IDA, or comparable reverse engineering and disassembly tools.
Strong knowledge of Linux fundamentals, including sockets, file descriptors, networking, iptables, file systems, and kernel behavior; ability to troubleshoot basic networking issues.
Strong understanding of TCP/IP, routing, switching, and common network protocols, with experience using packet capture and analysis tools such as Wireshark or tcpdump to troubleshoot connectivity and investigate network-based vulnerabilities.
Ability to read and write C and analyze assembly for architectures such as ARM, MIPS, or x86-64.
Strong programming fundamentals, including networking, data structures, and data models.
Experience developing reliable exploits, applying techniques such as arbitrary read/write primitives and return- or jump-oriented programming, and evaluating modern mitigations.
Demonstrated technical leadership, including improving research processes, systems, or methods beyond an individual assignment.
Experience influencing stakeholders within and outside the immediate team, explaining technical tradeoffs, and providing guidance, coaching, or training to other professionals.
Experience participating in capture-the-flag competitions, hackathons, or other cybersecurity competitions.

Nice To Haves

Active Top Secret security clearance.
Experience reverse engineering operating systems and kernels.
Experience with AFL++ or libFuzzer and security mechanisms such as SELinux, seccomp, ASLR, and control-flow integrity.
Experience with GDB, gdbserver, compiler toolchains, and the Android Native Development Kit.
Experience using QEMU or Unicorn to emulate code in non-native environments.
Demonstrated experience discovering previously unknown vulnerabilities, including zero-days.
Experience leading technical reviews and research teams, establishing shared research practices, and guiding customer discussions on research priorities.

Responsibilities

Lead complex research efforts from strategy and feasibility assessment through execution, validation, and delivery; establish technical priorities and success criteria.
Resolve difficult research problems through advanced static and dynamic analysis across relevant systems, architectures, and operating environments.
Guide vulnerability discovery, root-cause analysis, exploit development, and mitigation bypass for authorized customer requirements.
Evaluate exploit reliability and research evidence, resolve conflicting findings, and establish appropriate technical review and validation practices.
Improve processes, systems, and work methods across the research function to increase quality, repeatability, and effectiveness.
Guide development of reusable tooling, automation, and research infrastructure that support broader team needs.
Influence stakeholders within and outside the research team on research practices, technical procedures, and proposed policy improvements.
Lead technical coordination for small to medium-sized research teams, manage technical dependencies, and communicate tradeoffs, risks, and recommendations.
Coach and train other professionals, review technical work, and communicate findings to customers and partners; share research externally when authorized.