In this role you will get to support the United States Cyber Command (USCC), where you will have a significant impact on the mission.
What You'll Be Doing:- Conduct advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development.
- Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
- Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
- Develop proof-of-concept exploits to validate vulnerability findings and assess operational utility.
- Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
- Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.
- Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.
- Collaborate with capability development teams to translate vulnerability research into operational tools.
- Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
- Conduct limited TDY travel as mission requires.
What Required Skills You'll Bring:- Active TS/SCI with Poly
- Bachelor's degree in related technical field and 10+ years of related professional experience; Master's degree and 8+ years.
- Expert proficiency with disassemblers/decompilers (IDA Pro, Ghidra, Binary Ninja)
- Strong understanding of x86/x64/ARM assembly language and processor architectures
- Practical experience with debuggers (WinDbg, GDB, LLDB) and dynamic analysis tools
- Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust applications)
- Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions)
- Proficiency with fuzzing frameworks such as AFL, libFuzzer, Honggfuzz and corpus management
- Strong scripting skills (Python, Ruby, or similar) for automation and analysis
- Experience documenting technical research for both technical and operational audiences
What Desired Skills You'll Bring:- Experience with Windows kernel/driver reverse engineering
- Firmware analysis and embedded systems reverse engineering
- Network protocol analysis and vulnerability research
- Experience with UEFI/BIOS or bootloader security analysis
- Published vulnerability research (CVEs, conference presentations, blog posts)
- Familiarity with symbolic execution and taint analysis tools
- Understanding of offensive cyberspace operations workflows
TS/SCI with polygraph is required.
