Junior Cloud & Container Vulnerability Researcher

CACI International Inc; Florham Park (NJ); On-site; USD 79,000 - 163,000; Full time

Job summary

CACI International Inc. seeks a Junior Vulnerability Researcher for cloud and container security to own research tasks within the DNA of the cloud. You will apply your knowledge of container internals and binary analysis to hunt for escapes and logic flaws in Kubernetes environments.

You will work with a high-performing team to develop automated tooling (fuzzing, Angr/Manticore) and to secure national cybersecurity infrastructure. U.S.

Qualifications

• 3 years of professional experience in vulnerability research, reverse engineering, or systems-level software development.
• Familiarity with container orchestration (Kubernetes) and the OCI runtime specification.
• Working knowledge of Linux kernel internals, specifically regarding container isolation (namespaces/cgroups).
• Proficiency in software development and strong scripting skills.
• Hands-on experience with debugging tools like GDB and packet analysis tools like Wireshark.
• Demonstrated ability to conduct independent technical research and document complex findings.
• Must be a US Citizen and able to obtain/maintain a security clearance.

Responsibilities

• Execute research into OCI runtimes (runc, crun) and Linux kernel primitives to identify breakout and privilege escalation paths.
• Perform static and dynamic analysis on compiled binaries (Go, Rust, or C++) to map logic and identify potential security vulnerabilities.
• Develop and maintain custom fuzzing harnesses (e.g., AFL++, libFuzzer) to stress-test gRPC interfaces and microservice components.
• Use symbolic and concolic execution tools (e.g., Angr, Manticore) to automate the discovery of complex execution paths.
• Analyze containerized environments and system initialization logic to identify and document potential attack surfaces.
• Write custom Python3 scripts to automate research workflows, including firmware unpacking and memory analysis.
• Generate detailed technical reports and documentation for discovered vulnerabilities and research methodology.

Skills

Kubernetes

Linux kernel internals

Software development

Scripting

GDB debugging

Wireshark

Independent research

Documentation

Tools

IDA Pro

Ghidra

Binary Ninja

AFL++

libFuzzer

Angr

Manticore

Job description

CACI International Inc. seeks a Junior Vulnerability Researcher for cloud and container security to own research tasks within the DNA of the cloud. You will apply your knowledge of container internals and binary analysis to hunt for escapes and logic flaws in Kubernetes environments.

You will work with a high-performing team to develop automated tooling (fuzzing, Angr/Manticore) and to secure national cybersecurity infrastructure. U.S.