Senior Cloud & Container Security Researcher

CACI International; Florham Park (NJ); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI International is seeking a Senior Vulnerability Researcher with deep expertise in cloud-native architectures, container runtimes, and advanced binary analysis to hunt for vulnerabilities within distributed systems and Kubernetes infrastructure. You will build custom tooling in Python, conduct static and dynamic analysis of Go, Rust, and C/C++ binaries, and use IDA Pro, Ghidra, or Binary Ninja to map logic and discovery paths.

This on-site, U.S.

Qualifications

• 7+ years of professional experience in vulnerability research, software exploitation, or low-level engineering.
• Proven track record of finding vulnerabilities in distributed systems, virtualization layers, or container runtimes.
• Experience with Kubernetes security architecture and service mesh implementations (Istio, Linkerd).
• Detailed understanding of Linux kernel internals, namespaces, cgroups, and container execution model.
• Strong command of Python for scripting and automation of research tasks.
• Background in cloud provider security (AWS, Azure, or GCP) and underlying hypervisor technology.
• Must be a US Citizen and able to obtain/maintain a security clearance.

Responsibilities

• Investigate edge-case behaviors in containerized environments and low-level system initialization logic to reveal hidden attack surfaces.
• Conduct deep-dive research into OCI runtimes (runc, crun) and Linux kernel primitives to identify breakout and privilege escalation paths.
• Develop custom tools and scripts (primarily in Python3) to automate research workflows, protocol decoding, and memory analysis.
• Perform static and dynamic analysis on compiled binaries (Go, Rust, C++) using IDA Pro, Ghidra, or Binary Ninja to map undocumented logic and potential security issues.
• Build and maintain custom fuzzing harnesses (e.g., AFL++, libFuzzer) to stress-test gRPC interfaces, service mesh components, and microservices.
• Utilize concolic execution tools (e.g., Angr, Manticore) to automate discovery of complex execution paths and bypass security checks.
• Document findings clearly and translate technical complexity into actionable reports for security and engineering teams.

Skills

Vulnerability research

Python scripting

Go

Rust

C/C++

Reverse engineering

Tools

IDA Pro

Ghidra

Binary Ninja

GDB

AFL++

Job description

CACI International is seeking a Senior Vulnerability Researcher with deep expertise in cloud-native architectures, container runtimes, and advanced binary analysis to hunt for vulnerabilities within distributed systems and Kubernetes infrastructure. You will build custom tooling in Python, conduct static and dynamic analysis of Go, Rust, and C/C++ binaries, and use IDA Pro, Ghidra, or Binary Ninja to map logic and discovery paths.

This on-site, U.S.