Senior Reverse Engineering/Vulnerability Research Engineer
Clarity Innovations1 month ago
Rome, NY, USASenior
Base Salary
$106k - $277k/yr
Responsibilities
- Lead vulnerability research and reverse engineering efforts aligned with customer objectives.
- Define research strategies, assess technical feasibility, and guide teams through planning, execution, and delivery.
- Perform advanced static and dynamic analysis using disassemblers, debuggers, emulators, tracers, and fuzzers.
- Identify vulnerabilities, conduct root-cause analysis, and document reproducible findings.
- Develop proof-of-concept exploits and operational exploit capabilities for authorized customer requirements.
- Evaluate and bypass exploit mitigations and security mechanisms during authorized research.
- Build tooling, automation, and research infrastructure to improve vulnerability discovery and reproducibility.
- Communicate research progress, risks, findings, and recommendations to technical and non-technical stakeholders.
- Mentor security researchers, review technical work, and promote rigorous research practices.
- Lead small to medium-sized research teams while maintaining technical quality and project alignment.
Requirements
- TS/SCI security clearance and U.S. citizenship are required.
- Bachelor’s degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline, or four years of hands-on software engineering or comparable full-time technical experience.
- Demonstrated experience conducting vulnerability research and reverse engineering and independently driving complex investigations.
- Experience providing technical leadership and mentoring engineers or security researchers.
- Experience with Ghidra, Binary Ninja, IDA, or comparable reverse engineering and disassembly tools.
- Strong knowledge of Linux internals, including sockets, file descriptors, networking, iptables, file systems, and kernel behavior.
- Ability to read and write C and work with assembly languages for ARM, MIPS, and x86-64 architectures.
- Strong programming fundamentals, including networking, data structures, and data models.
- Understanding of arbitrary read/write primitives, shellcode development, return-oriented programming, and jump-oriented programming.
- Experience participating in capture-the-flag competitions, hackathons, or other cybersecurity competitions.
- Ability to communicate complex technical concepts clearly and produce actionable research documentation.
- Preferred qualifications include operating system and kernel reverse engineering, AFL++ or libFuzzer, SELinux, seccomp, ASLR, control-flow integrity, GDB or gdbserver, processor toolchains, Android Native Development Kit, QEMU, Unicorn, and zero-day discovery experience.
Benefits
- Performance-based bonuses, medical, dental, and vision coverage, a 401(k) plan with company match, paid time off, holidays, flexible work arrangements where possible, and income protection benefits.
- The position is located in Rome, NY and requires TS/SCI clearance and U.S. citizenship.
About Clarity Innovations
Clarity Innovations builds and deploys custom software, data analytics platforms, and cloud solutions for U.S. government customers, especially the Intelligence Community and Department of Defense. Its teams provide DevSecOps, systems architecture, rapid prototyping, and UX/UI services to modernize mission systems and workflows. Founded in 2011 and headquartered in Columbia, Maryland, it is privately held and operates as part of Chameleon Consulting Group.