Vulnerability Researcher (Cybersecurity)

Location: On-site in Fort Meade, Maryland, United States; limited TDY travel may be required.

Salary: $155,000–$175,000 per year.

Company

hirify.global supports United States national security and critical civilian missions through advanced technology integration and engineering.

What you will do

• Conduct advanced vulnerability research and reverse engineering on software and hardware systems to identify exploitable weaknesses.
• Analyze target platforms, architectures, protocols, security mechanisms, and attack surfaces, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
• Reverse engineer applications, firmware, and hardware components with disassemblers, debuggers, and binary analysis tools.
• Develop proof-of-concept exploits, validate findings, and assess operational utility.
• Document technical research and provide intelligence briefings on vulnerabilities, exploitation methods, and capability development approaches.
• Collaborate with capability development teams to translate vulnerability research into operational tools and maintain awareness of vulnerability disclosures, exploit techniques, and adversary tradecraft.

Requirements

• Bachelor’s degree in a related technical field with 10+ years of related professional experience, or a master’s degree with 8+ years of experience.
• Active TS/SCI clearance with CI Poly.
• Expert proficiency with disassemblers and decompilers including IDA Pro, Ghidra, or Binary Ninja.
• Strong understanding of x86, x64, and ARM assembly language and processor architectures.
• Practical experience with WinDbg, GDB, LLDB, and dynamic analysis tools.
• Demonstrated ability to discover vulnerabilities in compiled C, C++, and Rust software.
• Understanding of memory corruption, logic flaws, race conditions, and other common vulnerability classes.
• Proficiency with fuzzing frameworks such as AFL, libFuzzer, and Honggfuzz, including corpus management.
• Strong scripting skills in Python, Ruby, or a similar language for automation and analysis.
• Experience documenting technical research for technical and operational audiences.

Nice to have

• Windows kernel or driver reverse engineering experience.
• Firmware analysis and embedded systems reverse engineering experience.
• Network protocol analysis and vulnerability research experience.
• UEFI, BIOS, or bootloader security analysis experience.
• Published vulnerability research, including CVEs, conference presentations, or blog posts.
• Familiarity with symbolic execution and taint analysis tools.
• Understanding of offensive cyberspace operations workflows.

Culture & Benefits

• Health insurance, life insurance, paid time off, holiday pay, short-term and long-term disability coverage, and retirement benefits.
• Learning and development opportunities and additional optional benefits.
• Culture centered on happiness, helpfulness, honesty, humility, hunger for excellence, and drive.
• Collaborative environment supporting national security and critical civilian missions.