Cleared Senior Windows CNO Developer & Analyst

Yellow Duck Technologies Inc.; Corridor North (MD); On-site; USD 180,000 - 240,000; Full time

Job summary

Yellow Duck Technologies is seeking a Senior Windows Reverse Engineer & CNO Developer with 12+ years of experience in low-level software analysis, reverse engineering, and exploit development. Strong C++ and Python skills with assembly read/write capabilities are essential.

WinDbg proficiency and deep Windows internals knowledge are required. Collaboration in an Agile environment will drive security innovations.

Qualifications

• Active TS/SCI clearance with Full Scope Polygraph.
• 12+ years of software security research, reverse engineering and CNO development.
• Proficiency in C++ and Python.
• Experience reading and writing assembly.
• Strong knowledge of Windows internals, OS security, networks, and sockets.
• Familiarity with exploitation mitigations (DEP, ASLR) and vulnerability research workflows.
• Experience with Scrum/Kanban methodologies and version control.

Responsibilities

• Analyze and reverse engineer Windows-based software and exploits.
• Collaborate in an Agile environment to drive security innovations.
• Research vulnerabilities, read/write assembly, and develop exploit techniques.
• Coordinate with teams to apply mitigations and secure software practices.

Skills

Reverse engineering

CNO development

Low-level software analysis

C++

Python

Assembly language

Debugging tools

Windows internals

Networking protocols

Education

Bachelor's degree in a related field

Tools

WinDbg

Job description

Yellow Duck Technologies is seeking a Senior Windows Reverse Engineer & CNO Developer with 12+ years of experience in low-level software analysis, reverse engineering, and exploit development. The ideal candidate will have extensive expertise in C++ and Python development, experience reading and writing assembly (x86/x64, ARM, PPC, MIPS, SPARC, or others), and proficiency with debugging tools such as WinDbg. This role requires deep knowledge of Windows internals, OS security, and exploitation techniques, along with the ability to analyze network protocols, exploitation mitigations (DEP, ASLR), and modern software engineering principles. The candidate will work on cutting-edge vulnerability research, collaborating in an Agile environment to drive security innovations.

Requirements:

• Must have an active TS/SCI clearance with Full Scope Polygraph.
• Bachelor’s degree in a related fieldor an additional4 years of relevant experiencein lieu of a degree.
• 12+ years of experience in software security research, reverse engineering, and CNO development.
• Proficiency in C++ and Python.
• Experience reading and writing assembly.
• Hands-on experience with debugging tools.
• Strong knowledge of reverse engineering tools.
• Deep understanding of Windows internals, OS security, network protocols, and sockets.
• Familiarity with common CNO techniques and exploitation mitigations.
• Experience with Scrum/Kanban methodologies.
• Proficiency with version control systems.
• Understanding of basic configuration management principles.

Yellow Duck Technologies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, ethnicity, religion, sex, sexual orientation, gender identity and expression, national origin, disability, genetic information, veteran status, or any other protected characteristic or class.