Назад
Company hidden
3 дня назад

Principal Senior Vulnerability Research Engineer (Onsite) (Cybersecurity)

122 000 - 253 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Principal Senior Vulnerability Research Engineer (Cybersecurity): Developing vulnerability research techniques and identifying zero-day vulnerabilities through program analysis, reverse engineering, debugging, and fuzzing with an accent on C, C++, Python, and assembly. Focus on analyzing program behavior, developing and testing software applications, and researching exploit techniques for Windows and Linux systems.

Location: Onsite in Annapolis Junction, Maryland, United States; place of performance in Maryland.

Salary: $122,000–$253,000 per year, based on qualifications, relevant experience, and expertise.

Company

Provides full-spectrum cybersecurity, data operations, systems integration, intelligence mission support, vulnerability research, cyber defense, and software modernization services for government, defense, intelligence, civil, and commercial customers.

What you will do

  • Find zero-day vulnerabilities using advanced systems and vulnerability research techniques.
  • Analyze, design, and identify programmatic behaviors.
  • Develop, test, and debug software applications.
  • Research data and propose new vulnerability technique designs.
  • Apply debugging and fuzzing concepts to vulnerability research.

Requirements

  • 12 years of experience with a bachelor’s degree, or 10 years of experience with a master’s degree, in computer science or a related field.
  • Solid understanding of software development and knowledge of C, C++, or Python.
  • Experience with program analysis, reverse engineering, and debugging tools such as angr, BAP, IDA Pro, Binary Ninja, gdb, Ghidra, or windbg.
  • Knowledge of Windows or Linux.
  • Knowledge of x86/x64 assembly.
  • Top Secret/Sensitive Compartmented Information clearance with CI Poly preferred.
  • Ability to perform the work in Maryland.

Nice to have

  • Understanding of operating system internals.
  • Experience with exploit development or Hack The Box.
  • Experience reading or writing assembly.
  • Understanding of network protocols and application-layer concepts, including the ability to read and write socket code.
  • Understanding of exploit mitigations such as DEP and ASLR.
  • Relevant cybersecurity certifications, such as OSCP, OSCE, OSWP, OSEP, OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, or CISSP.

Culture & Benefits

  • Collaboration and teamwork with cybersecurity and intelligence professionals.
  • Medical, vision, and dental insurance.
  • 401(k) plan, paid time off, and holidays.
  • Additional insurance, wellness, work/life, career development, and recognition programs.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →