Cloud & Container Security Researcher

CACI International; Florham Park (NJ); On-site; USD 79,000 - 163,000; Full time

Job summary

CACI International is seeking a Junior Vulnerability Researcher (Cloud & Containers) in the Florham Park area to own research tasks, analyze OCI runtimes and Linux kernel primitives, and develop automated tooling for security in cloud environments.

The role requires 3–5 years in vulnerability research or related fields, strong scripting, and US citizenship with the ability to obtain a security clearance. Join a high‑performing team focused on national cybersecurity infrastructure.

Qualifications

• 3–5 years of professional experience in vulnerability research, reverse engineering, or systems‑level software development.
• Familiarity with Kubernetes and the OCI runtime specification.
• Working knowledge of Linux kernel internals, specifically container isolation (namespaces/cgroups).
• Proficiency in software development and strong scripting skills.
• Hands‑on experience with debugging tools like GDB and packet analysis tools like Wireshark.
• Must be a US Citizen and able to obtain/maintain a security clearance.

Responsibilities

• Execute research into OCI runtimes (runc, crun) and Linux kernel primitives to identify breakout and privilege escalation paths.
• Perform static and dynamic analysis on compiled binaries (Go, Rust, or C++) to map logic and identify potential security vulnerabilities.
• Develop and maintain custom fuzzing harnesses (e.g., AFL++, libFuzzer) to stress-test gRPC interfaces and microservice components.
• Use symbolic and concolic execution tools (e.g., Angr, Manticore) to automate the discovery of complex execution paths.
• Analyze containerized environments and system initialization logic to identify and document potential attack surfaces.
• Write custom Python3 scripts to automate research workflows, including firmware unpacking and memory analysis.
• Generate detailed technical reports and documentation for discovered vulnerabilities and research methodology.

Skills

Vulnerability research

Reverse engineering

Scripting

Research documentation

Cloud security

Tools

GDB

Wireshark

IDA Pro

Ghidra

Binary Ninja

Job description

CACI International is seeking a Junior Vulnerability Researcher (Cloud & Containers) in the Florham Park area to own research tasks, analyze OCI runtimes and Linux kernel primitives, and develop automated tooling for security in cloud environments.

The role requires 3–5 years in vulnerability research or related fields, strong scripting, and US citizenship with the ability to obtain a security clearance. Join a high‑performing team focused on national cybersecurity infrastructure.