Principal Reverse Engineering/Vulnerability Research Engineer
Clarity Innovations21 days ago
Rome, NY, USAStaff+
Base Salary
$146k - $248k/yr
Responsibilities
- Plan and execute vulnerability research efforts, define milestones, assess feasibility, and deliver results aligned with customer priorities.
- Perform static and dynamic analysis using disassemblers, debuggers, emulators, tracers, and fuzzers.
- Identify vulnerabilities, perform root-cause analysis, and document reproducible findings and technical limitations.
- Develop proof-of-concept exploits and operational exploit components for authorized customer requirements, including evaluating and bypassing mitigations.
- Build reusable tooling and automation and recommend research process improvements.
- Communicate progress, risks, findings, and recommendations to technical and non-technical stakeholders.
- Collaborate across technical teams, resolve dependencies, and support research approaches.
- Guide junior researchers, participate in peer reviews, and coordinate technical tasks within assigned efforts.
Requirements
- U.S. citizenship and Secret clearance with the ability to obtain and maintain TS/SCI clearance.
- Bachelor's degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline, or equivalent experience, plus at least five years of relevant experience.
- Ability to independently conduct vulnerability research and reverse engineering from planning through documented results.
- Experience with Ghidra, Binary Ninja, IDA, or comparable reverse-engineering and disassembly tools.
- Strong Linux fundamentals, including sockets, file descriptors, networking, iptables, file systems, and kernel behavior.
- Ability to read and write C and analyze assembly for ARM, MIPS, or x86-64 architectures.
- Strong programming fundamentals involving networking, data structures, and data models.
- Practical experience with arbitrary read/write primitives, shellcode development, return-oriented programming, or jump-oriented programming.
- Experience improving research methods, tooling, or processes to solve technical problems.
- Ability to collaborate across technical boundaries, clearly explain findings, and guide less experienced contributors.
- Experience in capture-the-flag competitions, hackathons, or other cybersecurity competitions.
- Preferred qualifications include an active Top Secret clearance, operating-system and kernel reverse engineering, AFL++ or libFuzzer, SELinux, seccomp, ASLR, control-flow integrity, GDB, gdbserver, compiler toolchains, Android Native Development Kit, QEMU, Unicorn, zero-day discovery, workstream coordination, peer review, or mentoring experience.
Benefits
- Performance-based bonuses, medical, dental, and vision coverage, a 401(k) plan with company match, paid time off, holidays, income protection benefits, and professional-growth resources.
- Flexible work arrangements where possible.
- The position is located in Rome, NY and requires Secret clearance with the ability to obtain and maintain TS/SCI clearance.
About Clarity Innovations
Clarity Innovations builds and deploys custom software, data analytics platforms, and cloud solutions for U.S. government customers, especially the Intelligence Community and Department of Defense. Its teams provide DevSecOps, systems architecture, rapid prototyping, and UX/UI services to modernize mission systems and workflows. Founded in 2011 and headquartered in Columbia, Maryland, it is privately held and operates as part of Chameleon Consulting Group.