Vulnerability Researcher/CNO Developer (Onsite)

Nightwing • San Antonio, TX

3d • Onsite

About The Position

Nightwing seeks a Vulnerability Researcher/CNO Developer to analyze systems, understand how they work, and study their behavior when they fail. The role involves both developing and defeating advanced security techniques. Work is performed in small teams in close coordination with customers. Engineers write code and may spend as much time reverse engineering systems as building new ones; a typical day may involve studying disassembly or writing Python to audit C++ code.

Nightwing provides cyber, data operations, systems integration, and intelligence mission support to customers in the intelligence community, defense, civil, and commercial markets. The company describes more than four decades of supporting U.S. government missions with technically advanced services.

Applicants must hold a TS/SCI clearance, be U.S. citizens, and meet the requirements to obtain and maintain a government security clearance. A BS/MS in a technical discipline is required, though equivalent work experience will be considered.

Requirements

• TS/SCI clearance required.
• Experience with C or C++.
• A BS/MS in a technical discipline, or equivalent work experience.
• U.S. citizenship required.
• Must meet the requirements to obtain and maintain a government security clearance.

Nice To Haves

• At least three of the listed desired skills: understanding OS internals; reading or writing assembly; developing embedded systems; understanding network protocols; understanding exploit mitigations such as DEP and ASLR; using reverse-engineering tools; using debuggers; or building and using vulnerability research tools.
• Understanding of OS internals for any major operating system.
• Experience reading or writing assembly, including x86, x64, ARM, PPC, MIPS, SPARC, 68k, or other architectures.
• Experience developing embedded systems.
• Understanding of network protocols, including TCP/IP stacks, wire-level protocols, RF communications, BGP, or routing protocols.
• Understanding of exploit mitigations such as DEP and ASLR.
• Experience using reverse-engineering tools such as IDA Pro, HexRays, Ghidra, Binary Ninja, or objdump.
• Experience using debuggers such as gdb, WinDbg, or OllyDbg.
• Experience building and using tools to find, exploit, and productize vulnerabilities in complex software systems.

Responsibilities

• Analyze systems to understand their operation and behavior when they break.
• Develop and defeat advanced security techniques.
• Work on projects in small teams and coordinate closely with customers.
• Write code and analyze systems, including studying disassembly and auditing C++ code with Python.
• Build and use tools to find, exploit, and productize vulnerabilities in complex software systems.

What This Job Offers

• Job Type: Full-time