Vulnerability Research and Exploit Developer
CACI International1 day ago
Base Salary
$94k - $198k/yr
Responsibilities
- Conduct vulnerability research and exploit development for mobile and network devices.
- Identify and analyze security weaknesses and provide actionable solutions.
- Apply AI models and AI-assisted workflows, including LLM-assisted code analysis, reverse engineering, and triage.
- Develop and maintain tools and scripts for automated vulnerability detection and exploitation.
- Build fuzzing harnesses and triage crashes to determine root causes.
- Integrate developed solutions into existing systems without disrupting operations.
- Collaborate with interagency partners and Joint Cyber Operations Group personnel.
- Provide technical guidance to team members and maintain detailed research and implementation documentation.
- Stay current with cybersecurity, vulnerability research, and exploit-development practices.
Requirements
- Current Top Secret/SCI security clearance with polygraph.
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, plus a minimum of five years of relevant experience, or an equivalent combination of education and experience.
- Demonstrated experience identifying and exploiting security weaknesses in mobile and network devices.
- Strong proficiency in C/C++, Python, and ARM/x86 assembly.
- Experience with exploit development, reverse engineering, and tools including IDA Pro, Ghidra, Binary Ninja, Frida, GDB/LLDB, and QEMU.
- Experience with fuzzing, memory-corruption vulnerabilities, exploit-mitigation bypasses, closed-source binaries, embedded firmware, and mobile-platform internals is desired.
- Experience with iOS or Android internals, kernel-mode or low-level exploitation, operating-system internals, and drivers is desired.
- Java/Kotlin experience for Android research and familiarity with Rust or similar memory-safe systems languages are desired.
- Master’s degree, relevant offensive-security or reverse-engineering certifications, published CVEs, conference talks, Pwn2Own results, or competitive CTF placements are preferred.
- Strong written and verbal communication skills and the ability to work independently and collaboratively.
Benefits
- Comprehensive healthcare, wellness, financial, retirement, family-support, continuing-education, and time-off benefits.
- Flexible time-off benefit and learning and development resources.
- Full-time regular employment with up to 10% local travel.
- The position is contingent on funding and may not be filled immediately.
About CACI International
CACI International is a public government contractor that delivers enterprise IT, cybersecurity, electronic warfare, space, and intelligence solutions to U.S. defense, intelligence, and federal civilian customers. It provides systems engineering, software and data services, and mission support across C4ISR and business systems, primarily through long-term government contracts. Founded in 1962 and headquartered in Reston, Virginia, CACI trades on the NYSE under the ticker CACI.