Vulnerability Researcher

Agile Defense • Fort Meade, MD

1d

About The Position

Agile Defense is seeking a Vulnerability Researcher to support United States Cyber Command (USCC). The role conducts advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development. It includes analyzing target platforms, discovering zero-day vulnerabilities, validating findings through proof-of-concept exploits, and translating research into operational tools and guidance for capability developers. The position is located in Fort Meade, Maryland, requires an active TS/SCI clearance with CI Poly, and may involve limited TDY travel as mission requires.

Requirements

• Bachelor’s degree in a related technical field and 10 or more years of related professional experience, or a master’s degree and 8 or more years of related professional experience.
• Expert proficiency with disassemblers/decompilers such as IDA Pro, Ghidra, or Binary Ninja.
• Strong understanding of x86/x64/ARM assembly language and processor architectures.
• Practical experience with debuggers such as WinDbg, GDB, or LLDB and dynamic analysis tools.
• Demonstrated capability discovering vulnerabilities in compiled software, including C/C++/Rust applications.
• Understanding of common vulnerability classes, including memory corruption, logic flaws, and race conditions.
• Proficiency with fuzzing frameworks such as AFL, libFuzzer, or Honggfuzz and corpus management.
• Strong scripting skills in Python, Ruby, or a similar language for automation and analysis.
• Experience documenting technical research for technical and operational audiences.
• Active TS/SCI with Poly clearance.

Nice To Haves

• Experience with Windows kernel/driver reverse engineering.
• Firmware analysis and embedded systems reverse engineering experience.
• Network protocol analysis and vulnerability research experience.
• Experience with UEFI/BIOS or bootloader security analysis.
• Published vulnerability research, such as CVEs, conference presentations, or blog posts.
• Familiarity with symbolic execution and taint analysis tools.
• Understanding of offensive cyberspace operations workflows.

Responsibilities

• Conduct advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development.
• Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
• Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
• Develop proof-of-concept exploits to validate vulnerability findings and assess operational utility.
• Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
• Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.
• Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.
• Collaborate with capability development teams to translate vulnerability research into operational tools.
• Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
• Conduct limited TDY travel as mission requires.

Benefits

• Health Insurance
• Life Insurance
• Paid Time Off
• Holiday Pay
• Short-term and long-term Disability
• Retirement
• Learning and Development opportunities
• Other optional benefit elections

What This Job Offers

• Job Type: Full-time
• Career Level: Senior