Senior 5G Protocol Security Researcher

CACI International; Florham Park (NJ); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI International is seeking a Senior Vulnerability Researcher with deep expertise in telecommunications security, 3GPP protocols, and advanced reverse engineering. You’ll probe the 5G stack for critical flaws and help evaluate the security and robustness of proprietary telecom systems.

Responsibilities include reverse‑engineering binaries, developing stateful fuzzers for 3GPP protocols, using concolic and symbolic execution tools, and creating PoCs.

Qualifications

• 7+ years of professional vulnerability research or reverse engineering.
• Deep understanding of 5G/4G architectures and 3GPP security standards.
• Experience with Linux kernel internals or RTOS used in telecom hardware.
• Proficiency with disassembly and decompilation tools and hardware debugging.

Responsibilities

• Investigate edge-case behaviors and low-level protocol signaling to reveal attack surfaces in proprietary telecom and embedded systems.
• Reverse‑engineer 5G baseband firmware and NF binaries without source code.
• Develop tools to automate protocol decoding and analysis workflows.
• Create PoCs for identified vulnerabilities in AMF/SMF/UPF.
• Document findings clearly for security and engineering teams.

Skills

5G security

Reverse engineering

Python scripting

C/C++

Disassembly tools

Tools

IDA Pro

Ghidra

Binary Ninja

JTAG/UART

Angr

Manticore

Job description

CACI International is seeking a Senior Vulnerability Researcher with deep expertise in telecommunications security, 3GPP protocols, and advanced reverse engineering. You’ll probe the 5G stack for critical flaws and help evaluate the security and robustness of proprietary telecom systems.

Responsibilities include reverse‑engineering binaries, developing stateful fuzzers for 3GPP protocols, using concolic and symbolic execution tools, and creating PoCs.