Windows CNO Developer (BZ)
Legato, LLC6 months ago
Dulles, VA, USAMid Level
Responsibilities
- Design, develop, and maintain Windows kernel-mode components, drivers, and subsystems.
- Reverse engineer Windows binaries to analyze system behavior, exploits, vulnerabilities, malware, and undocumented APIs.
- Conduct vulnerability research and proof-of-concept exploit development.
- Analyze crash dumps, identify root causes, and provide kernel-level debugging and troubleshooting support.
- Collaborate with cybersecurity researchers, analysts, and software engineers on security-focused development.
- Document findings, architecture, and procedures for internal teams or external clients.
Requirements
- Active TS/SCI clearance is required.
- At least 3 years of Windows CNO development experience is required.
- Bachelor’s or master’s degree in Computer Science, Computer Engineering, or a related field, or equivalent experience.
- Previous Windows kernel development experience.
- Proficiency in C/C++ systems-level programming.
- Expertise with IDA Pro, Ghidra, x64dbg, WinDbg, and Hex-Rays.
- In-depth knowledge of Windows internals, including kernel-mode drivers, memory management, system calls, and PE file format.
- Experience with kernel-mode debugging and root-cause analysis.
- Familiarity with secure coding practices and low-level exploit mitigation techniques such as PatchGuard, CFG, DEP, and ASLR.
- Strong understanding of malware behavior and techniques.
Benefits
- Individual and family health, vision, and dental benefits.
- At least four weeks of paid time off, including one week of sick leave.
- Eleven federal holidays off.
- 401(k) employer match with no vesting schedule.
- Potential referral benefits or banked hours if the contract allows.
- The position is located in Dulles, Virginia.
About Legato, LLC
Legato, LLC delivers systems, software, network, and cybersecurity engineering services to U.S. Intelligence Community and Department of Defense programs, primarily around Fort Meade. The privately held firm, founded in 2011 and headquartered in Columbia, Maryland, operates a government contracting model focused on cleared technical talent and mission support. Roles often require TS/SCI with polygraph, reflecting its work on classified programs and intelligence analysis.