Cleared Vulnerability Research Engineer

Bugcrowd; Pennsylvania; On-site; USD 154,800 - 193,500; Full time

Job summary

Bugcrowd is seeking an Exploit Development Specialist to focus on end-to-end exploit development for real-world targets. This role requires expertise in vulnerability discovery and reverse engineering, along with proficiency in C, Python, and Assembly. The position allows remote work from Pennsylvania with required travel to customer sites for extended periods. A TS/SCI clearance is required, emphasizing the need for confidentiality and integrity in handling sensitive information. The expected salary ranges from $154,800 to $193,500, potentially with a discretionary bonus.

Qualifications

• Experience with reverse engineering tools such as Binary Ninja, Ghidra, or IDA Pro.
• Deep understanding of stack and heap objects and exploit‑relevant vulnerabilities.
• Proven ability to discover new vulnerabilities, not just exploit known ones.
• Experience with manual analysis and automated techniques, including fuzzing.
• Proficiency in coding and debugging C, Python, and Assembly (x86‑64, ARM).
• Strong research ownership and autonomy.
• TS/SCI clearance required.

Responsibilities

• Design, develop, and validate vulnerability discovery capabilities.
• Conduct expert reverse engineering of binaries.
• Identify and exploit real‑world vulnerabilities.
• Employ manual analysis and automated techniques for discovery.
• Code and debug complex functions.
• Manage and execute research objectives independently.

Skills

Reverse engineering tools (Binary Ninja, Ghidra, IDA Pro)

Vulnerability discovery

C programming

Python programming

Assembly (x86‑64, ARM)

Job description

Job Summary

As a Exploit Development Specialist, you will focus on end‑to‑end exploit development for real‑world targets. You design, develop, and validate novel vulnerability discovery and exploitation capabilities against complex software and systems at the operating system, binary, and micro‑architectural levels. Success requires translating an under‑defined mission objective into a concrete, technically novel capability while operating with minimal supervision.

Responsibilities

• Design, develop, and validate novel vulnerability discovery and exploitation capabilities.
• Conduct expert reverse engineering of binaries (x86‑64, ARM64, etc.) using industry‑standard tools.
• Identify and exploit real‑world vulnerabilities such as use‑after‑free, type confusion, integer truncation, and buffer overflow.
• Discover new, novel vulnerabilities in complex systems.
• Understand current vulnerability research and apply findings to identify new instances of vulnerability classes.
• Employ both manual analysis and automated techniques (e.g., fuzzing) for vulnerability discovery.
• Code and debug complex functions in C, Python, and Assembly (x86‑64, ARM, etc.).
• Independently manage and execute research objectives, including scoping, research, experimentation, validation, and iteration.
• Travel to customer sites as required and perform on‑site work for extended periods of time.

Qualifications and Skills

• Experience with reverse engineering tools such as Binary Ninja, Ghidra, or IDA Pro.
• Deep understanding of stack and heap objects and exploit‑relevant vulnerabilities.
• Proven ability to discover new vulnerabilities, not just exploit known ones.
• Experience with both manual analysis and automated techniques, including fuzzing.
• Proficiency in coding and debugging C, Python, and Assembly (x86‑64, ARM, etc.).
• Strong research ownership and autonomy; able to translate an under‑defined mission into a concrete, technically novel capability.
• Comfort working with minimal supervision and incomplete problem definitions.
• TS/SCI clearance required (inactive SCI acceptable if SCI‑clearable).

Disclaimer

The position requires handling highly confidential, sensitive information related to Bugcrowd's technologies. Candidates must possess integrity and maintain confidentiality.

Working Conditions and Physical Requirements

Remote work‑from‑home with travel to customer location in Alabama to perform work in cleared spaces. The candidate must be able to sit and/or stand for 50% of the time and carry or move a laptop as needed.

Pay Range Disclosure

Base salary range: $154,800 – $193,500. The position may also be eligible for a discretionary bonus program or commission plan subject to the company's rules.

Equal Employment Opportunity

Bugcrowd is an Equal Opportunity Employer, including disability and age. All qualified applicants are considered regardless of race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. If reasonable accommodation is required, please contact HR at [e-mail].