Vulnerability Researcher
Research Innovations7 hours ago
St. Petersburg, FL, USA or San Antonio, TX, USAEntry Level
Responsibilities
- Conduct reverse engineering and vulnerability analysis on applications, OS components, and embedded systems.
- Identify attack surfaces, analyze in-memory behavior, and document findings.
- Create simple proof-of-concept exploits or scripts to validate vulnerabilities.
- Support research involving mobile devices, firmware, and embedded platforms.
- Collaborate on design discussions and shared tooling.
- Communicate research results clearly and improve documentation.
Requirements
- Active US Top Secret security clearance and ability to upgrade to TS/SCI Special Access Program access.
- Strong foundation in memory layout, CPU architecture, OS internals, or compiler behavior, including x86, ARM, or MIPS concepts.
- Coursework, projects, internships, or entry-level work involving reverse engineering, binary analysis, or vulnerability discovery.
- Experience using IDA, Ghidra, Binary Ninja, or debuggers.
- Programming experience in Python and at least one compiled language, preferably C.
- Familiarity with exploit mitigations such as ASLR, DEP/NX, and stack canaries, plus cryptographic concepts and TCP/IP, HTTP, and DNS protocol behavior.
- Preferred experience with malware analysis, symbolic execution, automated vulnerability-research pipelines, mobile OS security, RTOS environments, software protection or anti-reversing techniques, hardware interfaces, embedded boards, or radio/wireless protocols.
Benefits
- Flexible work schedules, health insurance, paid time off, 401(k) with company match, paid parental leave, and wellness programs available from day one.
- Company-paid benefits and access to office amenities including a game room, pantry, massage chair, escape room, community ambassadors, and community events.
- Full-time role located in St. Petersburg or Melbourne, Florida, or San Antonio, Texas.
About Research Innovations
Research Innovations Inc. develops mission software and R&D solutions for U.S. defense, intelligence, and cyber agencies, with select international clients, including Joint All-Domain Command and Control, data integration, situational awareness, and cyber operations tooling. The privately held company, founded in 2009 and headquartered in Alexandria, Virginia, delivers products and services primarily through government contracts and programs.