Vulnerability Researcher
Agile Defense15 days ago
Fort Meade, MD, USAStaff+
Base Salary
$155k - $175k/yr
Responsibilities
- Conduct vulnerability research and reverse engineering on software and hardware systems to identify exploitable weaknesses.
- Use fuzzing, code analysis, disassemblers, debuggers, and binary analysis tools to discover and validate vulnerabilities.
- Develop proof-of-concept exploits and assess their operational utility.
- Analyze system architectures, protocols, security mechanisms, and attack surfaces.
- Document technical findings and exploitation methodologies and brief technical and operational stakeholders.
- Collaborate with capability development teams to turn vulnerability research into operational tools.
- Track public vulnerability disclosures, exploit techniques, and adversary tradecraft.
- Perform limited TDY travel as mission requirements dictate.
Requirements
- Bachelor’s degree in a related technical field and 10+ years of related professional experience, or a master’s degree and 8+ years of experience.
- Expert proficiency with IDA Pro, Ghidra, and Binary Ninja.
- Strong knowledge of x86, x64, and ARM assembly language and processor architectures.
- Practical experience with WinDbg, GDB, LLDB, and dynamic analysis tools.
- Experience discovering vulnerabilities in compiled C, C++, and Rust applications.
- Understanding of memory corruption, logic flaws, and race conditions.
- Proficiency with AFL, libFuzzer, Honggfuzz, and corpus management.
- Strong scripting skills in Python, Ruby, or similar languages.
- Experience documenting technical research for technical and operational audiences.
- Active TS/SCI clearance with polygraph.
- Preferred qualifications include Windows kernel and driver reverse engineering, firmware and embedded systems analysis, network protocol analysis, UEFI/BIOS or bootloader security analysis, published vulnerability research, symbolic execution and taint analysis, and familiarity with offensive cyberspace operations workflows.
Benefits
- Employees are described as a top priority within a collaborative culture grounded in the company’s six core values.
- The role is based in Fort Meade, Maryland, and includes limited TDY travel as mission requirements dictate.
About Agile Defense
Agile Defense provides IT services and cybersecurity solutions for U.S. defense and federal civilian agencies, including digital transformation, systems integration, C4ISR support, data analytics, and cloud. Headquartered in McLean, Virginia, the privately held company is owned by Enlightenment Capital and operates across North America, Europe, Asia, and the Middle East. Its work centers on securing sensitive missions and modernizing government technology environments through managed services and mission-focused engineering.