Cyber Vulnerability Researcher (On-Site Camp Pendleton)

SG2 Recruiting; California (MO); On-site; USD 110,000 - 120,000; Full time

Job summary

Lumbee Holdings seeks a Cyber Vulnerability Researcher to advance vulnerability discovery, binary analysis, and exploitation across embedded and RTOS platforms in support of Marine Corps testing at Camp Pendleton, CA.

Role requires active DoD Secret security clearance (Top Secret preferred) and hands-on experience with Ghidra, IDA Pro, and related tools. Responsibilities include research, reporting, and remediation guidance, with on-site work at Camp Pendleton.

Qualifications

• Active DoD Secret Security Clearance (ability to obtain and maintain Top Secret preferred).
• At least five years using Ghidra for vulnerability research, binary analysis, and reverse engineering.

Responsibilities

• Conduct Original Vulnerability Research using static/dynamic analysis with tools like Ghidra, IDA Pro, WinDbg, OllyDbg, and gdb.
• Execute fuzzing campaigns and develop PoC exploits in isolated environments to validate impact.
• Analyze low-level assembly across x86/x64/ARM/MIPS/PowerPC to identify memory corruption and bypass strategies (DEP, ASLR, stack canaries).
• Assess embedded & RTOS platforms (VxWorks, RTOSs, Android, Linux, Windows) beyond commercial scanners.
• Analyze code and write reports outlining CWEs and security posture assessments for program offices.
• Automate research workflows with Python, Perl, Ruby, or C/C++ to speed up discovery cycles.
• Publish findings in Vulnerability Survey Reports and technical briefings with remediation guidance.

Skills

Ghidra

C/C++

Python

Reverse engineering

Tools

IDA Pro

WinDbg

OllyDbg

gdb

Job description

Lumbee Holdings seeks a Cyber Vulnerability Researcher to advance vulnerability discovery, binary analysis, and exploitation across embedded and RTOS platforms in support of Marine Corps testing at Camp Pendleton, CA.

Role requires active DoD Secret security clearance (Top Secret preferred) and hands-on experience with Ghidra, IDA Pro, and related tools. Responsibilities include research, reporting, and remediation guidance, with on-site work at Camp Pendleton.