Yellow Duck Technologies is seeking a Windows CNO Developer & Analyst with expertise in low-level software analysis, vulnerability research, and exploit development. The ideal candidate will have experience designing and writing code in C++ and Python, reading and writing assembly (x86/x64, ARM, PPC, MIPS, SPARC, or others), and working with debugging tools such as WinDbg. This role requires a strong understanding of Windows internals, OS security mechanisms, and exploitation techniques, along with the ability to analyze network protocols, exploitation mitigations (DEP, ASLR), and modern software engineering principles. The candidate will work in a collaborative, Agile environment to research vulnerabilities and develop innovative security solutions.
Requirements:
- Must have an active TS/SCI clearance with Polygraph.
- Bachelor's degree in a related field or an additional 4 years of relevant experience in lieu of a degree.
- Minimum 6 years of experience in software security research, reverse engineering, and development.
- Proficiency in C++ and Python.
- Experience with assembly programming.
- Strong background in debugging tools.
- Hands-on experience with reverse engineering tools.
- Deep understanding of Windows internals, OS security, network protocols, and sockets.
- Familiarity with common CNO techniques and exploitation mitigations.
- Experience with Scrum/Kanban methodologies.
- Proficiency with version control systems.
- Understanding of basic configuration management principles.
