Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Мало
$155к-175к/год
$180к$200кмедиана$240к
По похожим ролям (45) ~ $200к/год
76
Хорошая вакансия
развернуть
Роль описана четко и дает возможность заниматься специализированным исследованием уязвимостей для важных задач, но требование к допуску и работа только на площадке сужают круг тех, кому она доступна.
Кликните для подробной информации
Ниже рынкаЧеткая специализацияАктуальные инструментыНужен допускТолько на месте
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Vulnerability Researcher & Reverse Engineer (Cybersecurity): Conducting advanced vulnerability research and reverse engineering on software, firmware, hardware, and compiled applications with an accent on zero-day discovery, fuzzing, binary analysis, and exploit prototyping. Focus on analyzing attack surfaces, validating vulnerabilities through proof-of-concept exploits, and translating technical findings into operational cyber capabilities.
Location: Fort Meade, MD, United States. On-site role with limited TDY travel as mission requires.
Salary: $155,000–$175,000 per year.
Company
hirify.global supports national security and critical civilian missions through advanced technology, cybersecurity, and mission-focused engineering.
What you will do
Conduct advanced vulnerability research and reverse engineering on target software, firmware, hardware, and compiled applications.
Discover zero-day vulnerabilities through fuzzing, manual code review, and dynamic and static analysis.
Use disassemblers, debuggers, and binary analysis tools to analyze applications, architectures, protocols, and security mechanisms.
Develop proof-of-concept exploits to validate findings and assess operational utility.
Document technical vulnerability details and exploitation methodologies for technical and operational audiences.
Brief capability developers and collaborate with development teams to translate vulnerability research into operational tools.
Requirements
Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field.
10+ years of related professional experience, or a Master’s degree with 8+ years of related professional experience.
Proficiency with disassemblers or decompilers, including IDA Pro, Ghidra, and/or Binary Ninja.
Strong understanding of x86, x64, and ARM assembly language and processor architectures.
Practical experience with WinDbg, GDB, and/or LLDB and dynamic analysis tools.
Demonstrated capability discovering vulnerabilities in compiled C, C++, and Rust applications.
Understanding of memory corruption, logic flaws, race conditions, and other common vulnerability classes.
Proficiency with AFL, libFuzzer, Honggfuzz, and corpus management.
Strong scripting skills in Python, Ruby, or a similar language for automation and analysis.
Active TS/SCI clearance with CI Poly.
Culture & Benefits
Collaborative culture centered on helpfulness, honesty, humility, eagerness, and a strong work ethic.
Health insurance, life insurance, paid time off, and holiday pay.
Short-term and long-term disability coverage.
Retirement benefits and learning and development opportunities.
Additional optional benefit elections may be available depending on the position.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →