CNO Software Developer with Security Clearance

Gormat; Maryland; On-site; USD 130,000 - 180,000; Full time

Job summary

Gormat is seeking a CNO Software Developer to join our team supporting specialized military cyber operations. You will rapidly prototype offensive cyber capabilities and embed with the mission team on-site at Fort Meade/Columbia, MD, collaborating with subject matter experts in C and Windows internals to meet mission needs.

As part of a small team, you will mentor others, conduct design reviews, and continually sharpen your skills in low-level engineering and Windows/Linux internals, applying

Qualifications

• USCC JQR qualified personnel with offensive cyber ops experience.
• Bachelor's in CS/Cybersecurity and 5+ years of exploit/CNO tool development; Master's with 3+ years; additional years may substitute for degree.
• Proficiency in .NET, Python, C/C++, or ASM.
• Ability to analyze PoC exploits and engineer them to be stable/testable.
• Tech OS knowledge on Linux or Windows.
• Ability to generate documentation for developers/testers.

Responsibilities

• Rapidly prototype offensive cyber capabilities with senior engineers to meet evolving mission needs.
• Embed on-site with the mission team, working with experts in C, Windows internals, etc.
• Collaborate with vulnerability research to gather PoC exploit information and ensure products meet operational needs.
• Mentor teammates, conduct design/code reviews, and sharpen skills in programming and OS internals.
• Apply offensive cyber domain expertise (red/purple team) to deliver mission-critical solutions.

Skills

Exploit/CNO tool development

Red team operations

Purple team operations

Programming languages

OS knowledge

Education

Bachelor's degree in CS/Cybersecurity

Master's degree in related field

Tools

Ghidra

GDB

WinDbg

Fuzzing

Job description

Gormat is seeking a CNO Software Developer to join our team in support of specialized military cyber operations. You'll be a critical member of a small team, responsible for bringing your high-level offensive cyber expertise and rapid prototyping capability to bear on a critical national security mission. Join our team of best-in-industry cyber warriors who provide superior service in support of national defense objectives. What You'll Be Doing:

• Rapidly prototyping advanced offensive cyber capabilities with other senior engineers to meet complex and evolving mission needs.
• Embedding with the mission team on-site, working daily with subject matter experts in C, Windows internals, and related low-level disciplines.
• Collaborating with the vulnerability research team to gather relevant information on proof-of-concept exploits and engaging with the customer to ensure products meet operational needs.
• Contributing to a culture of technical excellence by sharing knowledge, mentoring teammates, conducting design/code reviews, and continually sharpening your own skills in programming, Windows internals, Linux internals, and low-level engineering.
• Applying offensive cyber domain expertise, including red/purple team operations, to develop and deliver mission-critical solutions. What Required Qualifications You'll Bring:
• USCC JQR qualified (Joint Qualification Record) personnel with proven experience in offensive cyber operations or equivalent contract/civilian work
• Bachelor's degree in related field (Computer Science, Cybersecurity, etc.) and 5+ years of experience in exploit/CNO tool development, with preference for offensive domain/red/purple team operators; Master's degree in related field and 3+ years of exploit/CNO tool development experience; 4+ additional years of directly related exploit/CNO tool development experience may be considered in lieu of degree
• Proficiency with programming languages such as .NET, Python, C/C++, and/or ASM
• Ability to analyze proof-of-concept exploit/CVE vulnerability and engineer it to be stable and testable
• Technical Operating System Knowledge with Linux or Windows
• Ability to generate accurate documentation for developers and testers What Desired Qualifications You'll Bring:
• Minimum 6-8 years of experience in exploit/CNO tool development
• Experience with rapid prototyping and automation tooling for advancing rapid outcomes
• Networking protocol/testing expertise
• Certified/trained in one or more of the following: Corelan Bootcamp/Advanced, ManTech ACTP Windows/Linux/VR&E, OSCP, OSED, OSWE, BCI Training, USCC CCD Developer (Senior)
• Experience with Ghidra, GDB, WinDebug, or Fuzzing
• Prior experience in offensive cyber operations, red/purple team activities, or equivalent work from a contract/civilian position Location: Fort Meade/Columbia MD (On-Customer Site/Embedded) NOTE: This position requires USCC JQR qualified personnel with proven offensive domain experience. Preference will be given to candidates with red/purple team backgrounds and rapid prototyping skills over traditional software development experience. Defensive-only or network operations center experience will not be considered sufficient for this role. TS/SCI with polygraph is required.