Назад
Company hidden
7 дней назад

Vulnerability Research Analyst (AI)

157 847 - 236 771$
Формат работы
onsite
Тип работы
fulltime
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Vulnerability Research Analyst (AI): Conducting static and dynamic vulnerability analysis of extracted COTS/GOTS source code and firmware images with an accent on AI-guided fuzzing, automated vulnerability detection, and software exploitability assessment. Focus on tracing execution paths, developing CodeQL and Semgrep detection rules, and evaluating complex software architectures for high-risk logic flaws.

Location: Linthicum, Maryland, United States; onsite

Salary: $157,847–$236,771 annualized

Company

hirify.global builds and deploys innovative products that address complex challenges and support safer global missions.

What you will do

  • Perform static and dynamic software vulnerability analysis on extracted COTS/GOTS source code repositories and firmware images.
  • Deploy AI-guided fuzzing and automated vulnerability detection suites across complex software architectures.
  • Validate automated findings by tracing code execution paths, identifying root causes, and assessing real-world exploitability.
  • Develop CodeQL queries, Semgrep rules, and AST-based detection signatures for newly discovered bug patterns and regression testing.
  • Present vulnerability assessments, risk perspectives, and testing metrics to program managers, stakeholders, and intelligence community partners.

Requirements

  • Active US Top Secret/SCI security clearance with polygraph required.
  • Must be willing to obtain and maintain a polygraph clearance.
  • Degree in Computer Science, Computer Engineering, Information Security, or equivalent practical experience.
  • Experience in vulnerability research, static source code analysis, reverse engineering, or software security audits.
  • Strong understanding of memory management, pointer arithmetic, and common security flaws in compiled and managed languages.
  • Familiarity with automated static and dynamic code analysis concepts and AI-driven automation tools.

Nice to have

  • Experience with CodeQL, Semgrep, or Tree-sitter-based static analysis rules.
  • Familiarity with firmware emulation tools such as QEMU, Unicorn Engine, Avatar2, Ghidra, or IDA emulator plugins.
  • Experience creating custom test drivers, stubs, and harness interfaces.
  • Knowledge of machine learning, symbolic execution, or AI-assisted code analysis for automated bug discovery.
  • Experience delivering vulnerability assessments for DoD or intelligence community defense programs.

Culture & Benefits

  • Medical, dental, and vision insurance.
  • Life and disability insurance.
  • Retirement benefits and paid leave.
  • Tuition assistance and professional development opportunities.
  • Compensation reflects education, experience, skills, geographic location, and contract requirements.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →