Cyber Security Vulnerability Researcher

tharros; Lexington Park (MD); On-site; USD 90,000 - 140,000; Full time

Job summary

Tharros seeks a Cyber Security Vulnerability Researcher - Intermediate to conduct research supporting NAWCAD Cyber Warfare Division programs at NAS Patuxent River, MD. You will perform vulnerability discovery, exploitation development, and security assessments across weapon systems and enterprise networks.

Responsibilities include security testing, red team support, and documenting findings to strengthen system security in DoD environments.

Qualifications

• DCWF qualification: CSWF Code 111, 221, 461, 511, 531, 541, 612, or 622.
• 3 years of vulnerability research experience or meets military equivalent OJT.
• Demonstrated experience with reverse engineering, binary analysis, and exploitation development.
• Experience conducting vulnerability assessments in DoD classified environments.

Responsibilities

• Conduct vulnerability assessments of systems, applications, and networks to identify security weaknesses and recommend remediation.
• Analyze system configurations, network traffic, and software components to identify potential vulnerabilities and security risks.
• Perform vulnerability validation, basic proof-of-concept testing, and support penetration testing activities under the guidance of senior team members.
• Assist with cyber assessments, security testing, and red team exercises to evaluate the effectiveness of security controls.
• Use industry-standard vulnerability scanning, assessment, and security testing tools to identify and document findings.
• Prepare technical reports that summarize vulnerabilities, risk levels, and recommended corrective actions.
• Support cyber test and evaluation activities by documenting results and assisting with security analysis.
• Collaborate with cybersecurity engineers, system administrators, and network teams to resolve identified security issues and strengthen system security.
• Research emerging cyber threats, vulnerabilities, and attacker techniques to support defensive security efforts.
• Maintain documentation, track remediation efforts, and ensure assessment activities align with established security standards and organizational policies.

Skills

Vulnerability research

Reverse engineering

Binary analysis

Exploitation development

Tools

Security testing tools

Job description

Tharros is seeking a Cyber Security Vulnerability Researcher - Intermediate to conduct research into fundamental computer and information science in support of NAWCAD Cyber Warfare Division programs at NAS Patuxent River, MD.

The CSVR conducts vulnerability discovery, exploitation development, and security assessment across weapons systems, enterprise networks, and embedded platforms. This position contributes to red team operations, cooperative vulnerability assessments, and the development of cyber threat emulation capabilities for the NAVAIR platform set.

• Conduct vulnerability assessments of systems, applications, and networks to identify security weaknesses and recommend remediation.
• Analyze system configurations, network traffic, and software components to identify potential vulnerabilities and security risks.
• Perform vulnerability validation, basic proof-of-concept testing, and support penetration testing activities under the guidance of senior team members.
• Assist with cyber assessments, security testing, and red team exercises to evaluate the effectiveness of security controls.
• Use industry-standard vulnerability scanning, assessment, and security testing tools to identify and document findings.
• Prepare technical reports that summarize vulnerabilities, risk levels, and recommended corrective actions.
• Support cyber test and evaluation activities by documenting results and assisting with security analysis.
• Collaborate with cybersecurity engineers, system administrators, and network teams to resolve identified security issues and strengthen system security.
• Research emerging cyber threats, vulnerabilities, and attacker techniques to support defensive security efforts.
• Maintain documentation, track remediation efforts, and ensure assessment activities align with established security standards and organizational policies.

Requirements:

• DCWF qualification: CSWF Code 111, 221, 461, 511, 531, 541, 612, or 622
• 3 years of experience performing vulnerability research, OR meets military equivalent OJT requirement
• Demonstrated experience with reverse engineering, binary analysis, and exploitation development
• Experience conducting vulnerability assessments in DoD classified environments