Rising Cloud & Containers Vulnerability Researcher

CACI International Inc.; Florham Park (NJ); On-site; USD 79,000 - 163,000; Full time

Job summary

CACI International Inc. in Florham Park, NJ seeks a Junior Vulnerability Researcher focused on cloud and container security. You will hunt for escapes in Kubernetes environments, analyze OCI runtimes, and develop automation tools.

The role emphasizes hands-on research, scripting, and documenting complex findings. The ideal candidate has 3–5 years of vulnerability research or reverse engineering experience, strong Linux kernel knowledge, and familiarity with fuzzing and binary analysis

Qualifications

• 3–5 years of professional vulnerability research, reverse engineering, or systems-level dev experience.
• Familiarity with container orchestration (Kubernetes) and OCI runtimes.
• Strong knowledge of Linux kernel internals and container isolation (namespaces/cgroups).
• Proficiency in software development and scripting; debugging with GDB and network analysis with Wireshark.

Responsibilities

• Execute research into OCI runtimes (runc, crun) and Linux kernel primitives to identify breakout paths.
• Perform static and dynamic analysis on Go, Rust, or C++ binaries to map logic and vulnerabilities.
• Develop and maintain fuzzing harnesses (AFL++, libFuzzer) to stress test gRPC interfaces and microservices.
• Use symbolic/concolic execution tools (Angr, Manticore) to discover complex execution paths.
• Analyze containerized environments and system init logic to identify attack surfaces.
• Write Python3 scripts to automate research workflows and memory analysis.
• Generate detailed reports documenting vulnerabilities and research methods.

Skills

Kubernetes

Go

Rust

C++

Python

Reverse engineering

Tools

GDB

Wireshark

AFL++

libFuzzer

Angr

Manticore

IDA Pro

Ghidra

Binary Ninja

Job description

CACI International Inc. in Florham Park, NJ seeks a Junior Vulnerability Researcher focused on cloud and container security. You will hunt for escapes in Kubernetes environments, analyze OCI runtimes, and develop automation tools.

The role emphasizes hands-on research, scripting, and documenting complex findings. The ideal candidate has 3–5 years of vulnerability research or reverse engineering experience, strong Linux kernel knowledge, and familiarity with fuzzing and binary analysis