Cleared Windows CNO Developer & Analyst (Entry-Level)

Yellow Duck Technologies Inc.; Corridor North (MD); On-site; USD 150,000 - 210,000; Full time

Job summary

Yellow Duck Technologies is seeking a Windows CNO Developer & Analyst with expertise in low-level software analysis, reverse engineering, and exploit development. The candidate will design and write code in C++ and Python, read assembly, and use debuggers like WinDbg within an Agile security team.

The role requires deep knowledge of Windows internals, OS security, network protocols, sockets, and exploitation mitigations.

Qualifications

• Must have TS/SCI clearance with Full Scope Polygraph.
• Bachelor's degree or 4 years of relevant experience in lieu of degree.
• Minimum 4 years of experience in software security research and reverse engineering.
• Strong programming skills in C++ and Python.
• Proficiency in reading and writing assembly.
• Experience with debugging tools.
• Hands-on experience with reverse engineering tools.
• In-depth knowledge of Windows internals, OS security, network protocols, and sockets.
• Understanding of common CNO techniques and exploitation mitigations.
• Familiarity with Scrum/Kanban methodologies.
• Experience with version control systems.
• Knowledge of basic configuration management principles.

Responsibilities

• Identify vulnerabilities and develop innovative security solutions within an Agile security team.
• Analyze Windows internals and OS security mechanisms to support defense and exploitation mitigation.
• Collaborate with security researchers to research threats and craft protections.

Skills

Reverse engineering

C++

Python

Windows internals

Networking protocols

OS security

Agile/Scrum Kanban

Debugging

Education

Bachelor's degree or equivalent experience

Tools

WinDbg

Version control

Job description

Yellow Duck Technologies is seeking a Windows CNO Developer & Analyst with expertise in low-level software analysis, reverse engineering, and exploit development. The ideal candidate must have experience designing and writing code in C++ and Python, working with assembly (x86/x64, ARM, PPC, MIPS, SPARC, or others), and using debuggers like WinDbg. This role requires a deep understanding of Windows internals, OS security mechanisms, and common CNO techniques, along with experience analyzing network protocols, exploitation mitigations (DEP, ASLR), and modern software engineering concepts. The candidate will work within an Agile environment, collaborating with other security researchers to identify vulnerabilities and develop innovative security solutions.

Requirements:

• Must have an active TS/SCI clearance with Full Scope Polygraph.
• Bachelor’s degree in a related field or an additional 4 years of relevant experience in lieu of a degree.
• Minimum 4 years of experience in software security research and reverse engineering.
• Strong programming skills in C++ and Python.
• Proficiency in reading and writing assembly.
• Experience with debugging tools.
• Hands-on experience with reverse engineering tools.
• In-depth knowledge of Windows internals, OS security, network protocols, and sockets.
• Understanding of common CNO techniques and exploitation mitigations.
• Familiarity with Scrum/Kanban methodologies.
• Experience with version control systems.
• Knowledge of basic configuration management principles.

Yellow Duck Technologies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, ethnicity, religion, sex, sexual orientation, gender identity and expression, national origin, disability, genetic information, veteran status, or any other protected characteristic or class.