Security Product Reverse Engineer – Vulnerability Research

Nightwing; Sterling (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

A cybersecurity firm in Virginia is seeking an experienced Security Product Reverse Engineer to support advanced security research and development efforts. The ideal candidate will have expertise in reverse engineering and vulnerability research across various operating systems. Responsibilities include analyzing security products for vulnerabilities, developing and debugging exploits, and conducting detailed source code analysis. This role requires a minimum of 3 years of relevant experience and active TS/SCI clearance.

Qualifications

• Current TS/SCI with Poly Clearance required.
• Minimum 3 years of experience developing, testing, and debugging software in C, C++, and Python.
• Minimum 3 years of demonstrated experience using IDA Pro and/or Ghidra for reverse engineering.
• 3 years of hands-on Vulnerability Research experience in Windows, Linux, or macOS environments.
• 5 years of hands-on experience developing and testing CNEs against security product families.

Responsibilities

• Perform reverse engineering of security products to identify vulnerabilities.
• Conduct in-depth source code analysis and comprehensive code audits.
• Develop, test, and debug tooling and exploits in C, C++, and Python.
• Analyze binaries and firmware using reverse engineering tools.
• Support development and testing of Computer Network Exploits (CNEs).
• Document findings and communicate technical results to stakeholders.

Skills

Reverse engineering

Vulnerability research

Low-level system analysis

C

C++

Python

Source code analysis

Code auditing

Tools

IDA Pro

Ghidra

Job description

A cybersecurity firm in Virginia is seeking an experienced Security Product Reverse Engineer to support advanced security research and development efforts. The ideal candidate will have expertise in reverse engineering and vulnerability research across various operating systems. Responsibilities include analyzing security products for vulnerabilities, developing and debugging exploits, and conducting detailed source code analysis. This role requires a minimum of 3 years of relevant experience and active TS/SCI clearance.