Principal Vulnerability Researcher

Nightwing; Maryland; On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Competitive compensation

Healthcare benefits

Retirement benefits

Professional development programs

Job summary

A leading cybersecurity firm in Maryland is seeking a seasoned software professional with over 10 years of experience in technology. The ideal candidate will have a strong background in software development using C, C++, or Python, and experience with programs like angr and IDA Pro. This onsite role involves discovering vulnerabilities and enhancing security techniques. Competitive compensation and benefits await qualified applicants.

Qualifications

• 10+ years of practical experience in a technology environment.
• Current TS/SCI with polygraph security clearance; all candidates must be U.S. citizens.

Responsibilities

• Use advanced systems to discover zero-day vulnerabilities.
• Analyze, design, and identify programmatic behaviors in software.
• Develop, test, and debug software applications related to vulnerability research.
• Research data and generate new design ideas for vulnerability techniques.
• Apply debugging and fuzzing techniques to enhance security findings.

Skills

Software development in C

Software development in C++

Software development in Python

Program analysis

Reverse engineering

Debugging tools

Knowledge of Windows

Knowledge of Linux

Assembly (x86/x64)

Education

Bachelor of Science in Computer Science

Tools

angr

BAP

IDA Pro

Binary Ninja

gdb

Ghidra

windbg

Job description

Overview

Nightwing provides technically advanced full‑sphere cyber operations, data intelligence, systems integration, and mission support services for intelligence, defense, civil, and commercial markets. Our capabilities cover cyber space operations, cyber defense and resiliency, vulnerability research, technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing has a legacy of four decades serving the U.S. government with innovative solutions.

Responsibilities

• Use advanced systems to discover zero‑day (O‑day) vulnerabilities.
• Analyze, design, and identify programmatic behaviors in software.
• Develop, test, and debug software applications related to vulnerability research.
• Research data and generate new design ideas for vulnerability techniques.
• Apply debugging and fuzzing techniques to enhance security findings.

Role Type

This position is an onsite role.

Required Skills

• Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field with 10+ years of practical experience in a technology environment.
• Solid understanding of software development in C, C++, or Python.
• Experience with program analysis, reverse engineering, and debugging tools (e.g., angr, BAP, IDA Pro, Binary Ninja, gdb, Ghidra, windbg).
• Knowledge of Windows or Linux operating systems.
• Knowledge of Assembly (x86/x64).
• Current TS/SCI with polygraph security clearance; all candidates must be U.S. citizens.

Desired Skills

• Understanding of operating‑system internals.
• Experience with exploit development, following platforms such as Hack The Box.
• Proficiency in reading or writing assembly.
• Knowledge of network protocols and socket programming.
• Understanding of exploit mitigations such as DEP and ASLR.

Relevant Certifications (Not Required)

OSCP, OSCE, OSWP, OSEP, OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP.

What We Offer

We provide a comprehensive total‑rewards package that includes competitive compensation, healthcare, wellness, retirement and work/life benefits, and career development and recognition programs. Nightwing values collaboration and teamwork, offering opportunities to work with talented professionals on mission‑critical projects.

EEO Statement

Nightwing is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age, or any other federally protected class.