3 months ago
Annapolis Junction, MD, USASenior
Base Salary
$180k - $230k/yr
Responsibilities
- Discover and research zero-day vulnerabilities and publicly disclosed CVEs.
- Exploit or productize zero-day, n-day, and other publicly disclosed vulnerabilities.
- Write or use fuzzers and perform code analysis.
- Reverse engineer malware and other code for CNE purposes.
- Use reverse-engineering tools and debuggers to analyze software.
- Write, navigate, and build C/C++ code and develop tools in Python.
- Work with ARM and MIPS architectures and Linux variants.
Requirements
- Active TS/SCI clearance with polygraph.
- A record of discovering and being credited for zero-day vulnerabilities or CVEs.
- Experience performing vulnerability research.
- Experience with AFL, LibFuzzer, ClusterFuzz, or oss-fuzz.
- Experience with CodeQL, Joern, or Semgrep.
- Experience exploiting or productizing zero-day or n-day vulnerabilities and CVEs.
- Experience reverse engineering malware or other code for CNE purposes.
- Experience with Ghidra, IDA Pro, or Binary Ninja.
- Experience using GDB or WinDbg.
- Experience writing, navigating, and building C/C++ code.
- Experience with VSCode, Visual Studio, VIM, or Emacs.
- Familiarity with ARM or MIPS architectures and Linux variants.
- Experience using Python to write tools.
Benefits
- Medical, dental, and vision coverage.
- Health Savings Account with company contribution.
- Annual paid time off and paid holidays.
- Paid parental leave.
- 401(k) with generous company match.
- Training and development opportunities.
- Award programs and company-sponsored events.
- Work-life balance support and opportunities for professional growth.
- On-site role in Annapolis Junction, Maryland.
About GRVTY
GRVTY builds software, data platforms, and analytics for intelligence, surveillance, reconnaissance, and targeting (ISR&T) missions, serving U.S. defense and intelligence customers. Offerings include GEOINT analytics, deployed analysts, enterprise IT support, and managed software services, including data lake/warehouse applications. The privately held company is headquartered in McLean, Virginia and operates under federal contracts across cyber, space, and spectrum domains.