Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Средняя
$158к-237к/год
$150к$180кмедиана$230к
По похожим ролям (48) ~ $180к/год
На СНГ рынке: $4.2к/мес ($2.9к - $7.7к)
87
Хорошая вакансия
развернуть
Чёткие задачи по поиску уязвимостей, высокая зарплатная вилка и работа на стыке ИИ и кибербезопасности делают вакансию сильной, но требование действующего допуска TS/SCI с полиграфом заметно сужает круг тех, кому она доступна.
Кликните для подробной информации
Строгий допускСовременные инструментыДостойная зарплатаРабота на площадке
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Vulnerability Research Analyst (AI): Conducting static and dynamic vulnerability analysis of extracted COTS/GOTS source code and firmware images with an accent on AI-guided fuzzing, automated vulnerability detection, and software exploitability assessment. Focus on tracing execution paths, developing CodeQL and Semgrep detection rules, and evaluating complex software architectures for high-risk logic flaws.
Location: Linthicum, Maryland, United States; onsite
Salary: $157,847–$236,771 annualized
Company
hirify.global builds and deploys innovative products that address complex challenges and support safer global missions.
What you will do
Perform static and dynamic software vulnerability analysis on extracted COTS/GOTS source code repositories and firmware images.
Deploy AI-guided fuzzing and automated vulnerability detection suites across complex software architectures.
Validate automated findings by tracing code execution paths, identifying root causes, and assessing real-world exploitability.
Develop CodeQL queries, Semgrep rules, and AST-based detection signatures for newly discovered bug patterns and regression testing.
Present vulnerability assessments, risk perspectives, and testing metrics to program managers, stakeholders, and intelligence community partners.
Requirements
Active US Top Secret/SCI security clearance with polygraph required.
Must be willing to obtain and maintain a polygraph clearance.
Degree in Computer Science, Computer Engineering, Information Security, or equivalent practical experience.
Experience in vulnerability research, static source code analysis, reverse engineering, or software security audits.
Strong understanding of memory management, pointer arithmetic, and common security flaws in compiled and managed languages.
Familiarity with automated static and dynamic code analysis concepts and AI-driven automation tools.
Nice to have
Experience with CodeQL, Semgrep, or Tree-sitter-based static analysis rules.
Familiarity with firmware emulation tools such as QEMU, Unicorn Engine, Avatar2, Ghidra, or IDA emulator plugins.
Experience creating custom test drivers, stubs, and harness interfaces.
Knowledge of machine learning, symbolic execution, or AI-assisted code analysis for automated bug discovery.
Experience delivering vulnerability assessments for DoD or intelligence community defense programs.
Culture & Benefits
Medical, dental, and vision insurance.
Life and disability insurance.
Retirement benefits and paid leave.
Tuition assistance and professional development opportunities.
Compensation reflects education, experience, skills, geographic location, and contract requirements.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →