Lead Vulnerability Researcher (TS/SCI) & Exploit Expert

BTS Software Solutions; Corridor North (MD); Sur place; USD 260 000 - 300 000; Plein temps

Avantages offerts par ce poste

100% Company PAID health benefits

PTO

401K matching and vested from day one

Résumé du poste

BTS Software Solutions is seeking a Vulnerability Researcher III with an active TS/SCI w/ POLY to join our Annapolis Junction, MD team. The role focuses on advanced vulnerability research, reverse engineering, and exploit development across large software projects.

You will lead analysis efforts, author impact documentation, and present findings to stakeholders. The candidate will apply deep knowledge of C/C++/assembly, system APIs, and security mitigations to identify and exploit

Qualifications

• Meets all qualifications of a CNO Vulnerability Researcher/Analyst II, but has the following increased experience and skill levels
• Proven results from participation in vulnerability discovery efforts within the last twelve (12) months
• Demonstrated ability to discover multiple previously unknown vulnerabilities (0-day) across multiple versions of similar technologies.

Responsabilités

• Actively debug software and troubleshoot issues with software crashes and programmatic flow
• Ability to perform source code analysis in an effort to discover software flaws, and
• provide/author documentation on the impact and severity of the flaw
• Ability to develop proof-of-concept exploits against research targets, prototypes, and hands-on demonstrations of vulnerability analysis results
• Provide/author and participate in technical presentations on assigned projects
• Lead reverse engineering and vulnerability research
• Lead efforts to debug software and troubleshoot issues with software crashes and programmatic flow
• Ability to perform source code analysis in an effort to discover software flaws, and provide/author documentation on the impact and severity of the flaw
• Ability to develop robust exploits (advancements beyond initial proof-of-concept such as version coverage, decreased failure rate, handling edge cases, etc.) against research targets, prototypes, and hands-on demonstrations of vulnerability analysis results
• Edit/Approve and participate in technical presentations on assigned projects
• Subject Matter Expert and Leader of at least one technology area responsible for reverse engineering and vulnerability analysis

Connaissances

Assembly

C

C#

C++

Perl

Python

Unix APIs

Windows APIs

VTables (C++)

Heap protections

Kernel programming

IDA Pro

Ghidra

Binary Ninja

Embedded devices analysis

Outils

IDA Pro

Ghidra

Binary Ninja

Description du poste

BTS Software Solutions is seeking a Vulnerability Researcher III with an active TS/SCI w/ POLY to join our Annapolis Junction, MD team. The role focuses on advanced vulnerability research, reverse engineering, and exploit development across large software projects.

You will lead analysis efforts, author impact documentation, and present findings to stakeholders. The candidate will apply deep knowledge of C/C++/assembly, system APIs, and security mitigations to identify and exploit