Назад
Company hidden
2 дня назад

Senior Vulnerability Researcher & Reverse Engineer (Cybersecurity)

155 000 - 175 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Vulnerability Researcher & Reverse Engineer (Cybersecurity): Conducting advanced vulnerability research and reverse engineering on software, firmware, hardware, and compiled applications with an accent on zero-day discovery, fuzzing, binary analysis, and exploit prototyping. Focus on analyzing attack surfaces, validating vulnerabilities through proof-of-concept exploits, and translating technical findings into operational cyber capabilities.

Location: Fort Meade, MD, United States. On-site role with limited TDY travel as mission requires.

Salary: $155,000–$175,000 per year.

Company

hirify.global supports national security and critical civilian missions through advanced technology, cybersecurity, and mission-focused engineering.

What you will do

  • Conduct advanced vulnerability research and reverse engineering on target software, firmware, hardware, and compiled applications.
  • Discover zero-day vulnerabilities through fuzzing, manual code review, and dynamic and static analysis.
  • Use disassemblers, debuggers, and binary analysis tools to analyze applications, architectures, protocols, and security mechanisms.
  • Develop proof-of-concept exploits to validate findings and assess operational utility.
  • Document technical vulnerability details and exploitation methodologies for technical and operational audiences.
  • Brief capability developers and collaborate with development teams to translate vulnerability research into operational tools.

Requirements

  • Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field.
  • 10+ years of related professional experience, or a Master’s degree with 8+ years of related professional experience.
  • Proficiency with disassemblers or decompilers, including IDA Pro, Ghidra, and/or Binary Ninja.
  • Strong understanding of x86, x64, and ARM assembly language and processor architectures.
  • Practical experience with WinDbg, GDB, and/or LLDB and dynamic analysis tools.
  • Demonstrated capability discovering vulnerabilities in compiled C, C++, and Rust applications.
  • Understanding of memory corruption, logic flaws, race conditions, and other common vulnerability classes.
  • Proficiency with AFL, libFuzzer, Honggfuzz, and corpus management.
  • Strong scripting skills in Python, Ruby, or a similar language for automation and analysis.
  • Active TS/SCI clearance with CI Poly.

Culture & Benefits

  • Collaborative culture centered on helpfulness, honesty, humility, eagerness, and a strong work ethic.
  • Health insurance, life insurance, paid time off, and holiday pay.
  • Short-term and long-term disability coverage.
  • Retirement benefits and learning and development opportunities.
  • Additional optional benefit elections may be available depending on the position.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →