Senior Cloud & Container Security Research Engineer

CACI; Florham Park (NJ); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI seeks a Senior Penetration Engineer focused on cloud-native architectures, containers, and binary analysis. You will hunt for vulnerabilities across Kubernetes infrastructure and distributed systems, using both automated and manual techniques.

You will develop Python tooling, perform static/dynamic analysis of binaries, and create fuzzing harnesses to expose security flaws. U.S. citizenship and the ability to obtain a clearance are required, with up to 10% travel.

Qualifications

• 7+ years of professional experience in vulnerability research, software exploitation, or low-level engineering.
• Proven track record of finding vulnerabilities in distributed systems, virtualization, or container runtimes.
• Experience with Kubernetes security architecture and service mesh implementations (Istio, Linkerd).
• Deep understanding of Linux kernel internals (namespaces, cgroups, container execution).
• Strong Python scripting for automation.
• Background in cloud provider security (AWS, Azure, GCP) and underlying hypervisor tech.
• US Citizenship and ability to obtain/maintain a security clearance.

Responsibilities

• Investigate edge-case behaviors in containerized environments to reveal hidden attack surfaces.
• Research OCI runtimes (runc, crun) and Linux primitives to identify privilege escalation paths.
• Develop Python tools to automate research workflows and memory analysis.
• Perform static and dynamic analysis of binaries (Go, Rust, C++) using IDA Pro, Ghidra, or Binary Ninja.
• Build fuzzing harnesses (AFL++, libFuzzer) to stress-test gRPC, service mesh components, and microservices.
• Use concolic execution tools (Angr, Manticore) to automate complex execution-path discovery.
• Document findings clearly for security and engineering teams.

Skills

Vulnerability research

Kubernetes security

Python scripting

Linux kernel internals

Cloud security

Security clearance

C/C++ proficiency

Disassembly tools

Tools

IDA Pro

Ghidra

Binary Ninja

GDB

AFL++

libFuzzer

Job description

CACI seeks a Senior Penetration Engineer focused on cloud-native architectures, containers, and binary analysis. You will hunt for vulnerabilities across Kubernetes infrastructure and distributed systems, using both automated and manual techniques.

You will develop Python tooling, perform static/dynamic analysis of binaries, and create fuzzing harnesses to expose security flaws. U.S. citizenship and the ability to obtain a clearance are required, with up to 10% travel.