Senior 5G Protocol Security Researcher — Flexible Time Off

CACI International Inc; Florham Park (NJ); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI International Inc in Florham Park seeks a Senior Vulnerability Researcher to probe telecom security, reverse engineer 5G components, and craft PoC exploits for critical vulnerabilities. You will work on stateful fuzzers, protocol decoding, and secure reporting to engineering teams.

The role demands deep knowledge of 3GPP, 5G baseband firmware, binary analysis, and scripting in Python, with a preference for candidates with U.S. citizenship and ability to obtain clearance.

Qualifications

• 7+ years of vulnerability research, protocol analysis or reverse engineering.
• Deep understanding of 5G/4G architecture and 3GPP security standards.
• Strong knowledge of networking and telecom protocol stacks including signaling, management and data planes.
• Experience with Linux kernel internals or RTOS used in telecom hardware.
• Hands-on with disassembly and decompilation tools (IDA Pro, Ghidra, Binary Ninja) and hardware debugging.
• US citizenship and ability to obtain/maintain a security clearance.

Responsibilities

• Investigate edge-case signaling and protocol behavior to reveal attack surfaces in proprietary telecom and embedded systems.
• Reverse-engineer 5G baseband firmware and NF binaries where source is unavailable.
• Develop Python tools to automate protocol decoding, firmware unpacking, and analysis workflows.
• Create stateful fuzzers for 3GPP protocols to identify crashes in the 5G Core.
• Use concolic and symbolic execution (Angr, Manticore) to map state machines and find logic flaws in session management.
• Document findings and translate complexity into actionable reports for security teams.

Skills

Vulnerability research

5G security

Reverse engineering

Python scripting

C/C++

Disassembly

Linux kernel

Tools

IDA Pro

Ghidra

Binary Ninja

JTAG/UART

Job description

CACI International Inc in Florham Park seeks a Senior Vulnerability Researcher to probe telecom security, reverse engineer 5G components, and craft PoC exploits for critical vulnerabilities. You will work on stateful fuzzers, protocol decoding, and secure reporting to engineering teams.

The role demands deep knowledge of 3GPP, 5G baseband firmware, binary analysis, and scripting in Python, with a preference for candidates with U.S. citizenship and ability to obtain clearance.