Senior Vulnerability Researcher
Core
Identifying zero-day vulnerabilities, analyzing programmatic behaviors, and developing/debugging software applications for intelligence and defense missions.
Role type
Senior IC vulnerability researcher (security clearance required)
Builds
Vulnerability research outputs, exploitable 0-day/n-day vulnerabilities, and security products
Domain
Cybersecurity, intelligence community, defense, and civil markets
Required skills
0-day vulnerability discovery, CVE attribution, fuzzing (AFL, LibFuzzer, ClusterFuzz, oss-fuzz), static/dynamic code analysis (CodeQL, Joern, Semgrep), reverse engineering malware, C/C++ development, Python scripting, ARM/MIPS architecture knowledge, Linux variants, debugging (GDB, WinDbg)
Preferred skills
Exploiting n-day vulnerabilities, productizing CVEs, CTF competition experience, reverse engineering tools (Ghidra, IDA Pro, Binary Ninja), development tools (VS Code, Visual Studio, VIM, Emacs)
Technologies
ARM, Linux, OSS, Python, Security, Visual Studio, VS Code, C++