Senior Cloud & Container Vulnerability Researcher

Dormont Manufacturing Co; Florham Park (NJ); On-site; USD 113,200 - 237,800; Full time

Job summary

Dormont Manufacturing Co in Florham Park, NJ, seeks a Senior Vulnerability Researcher with Top Secret clearance to hunt for weaknesses in cloud-native systems, Kubernetes, and container runtimes. You will perform static/dynamic binary analysis with IDA Pro, Ghidra, and Binary Ninja; develop fuzzing harnesses; and translate complex findings into actionable reports for security and engineering teams.

This full-time role requires 7+ years of experience and deep knowledge of Go, Rust, C/C++, Python,

Qualifications

• Active Top Secret clearance.
• 7+ years vulnerability research or low-level engineering.
• Expert Go, Rust, and C/C++ proficiency.
• Strong Python3 scripting.
• Deep knowledge of x86/ARM assembly and memory corruption.
• Proven vulnerabilities in distributed systems or container runtimes.
• Experience with disassembly/decompilation tools and debuggers.

Responsibilities

• Deep-dive OCI runtimes (runc, crun) and Linux namespaces, cgroups, eBPF to find breakouts and privilege escalations.
• Static/dynamic analysis of binaries with IDA Pro, Ghidra, or Binary Ninja to map logic and issues.
• Develop fuzzing harnesses (AFL++, libFuzzer) to stress-test gRPC interfaces and microservices.
• Use concolic execution tools (Angr, Manticore) to automate complex path discovery.
• Investigate edge-case behaviors in containerized environments to reveal attack surfaces.
• Build Python3 tools to automate research workflows, protocol decoding, and memory analysis.
• Document findings clearly for security and engineering teams.

Skills

Go

Rust

C/C++

Python3

Assembly

Fuzzing

Concolic execution

Tools

IDA Pro

Ghidra

Binary Ninja

GDB

AFL++

libFuzzer

Angr

Manticore

Job description

Dormont Manufacturing Co in Florham Park, NJ, seeks a Senior Vulnerability Researcher with Top Secret clearance to hunt for weaknesses in cloud-native systems, Kubernetes, and container runtimes. You will perform static/dynamic binary analysis with IDA Pro, Ghidra, and Binary Ninja; develop fuzzing harnesses; and translate complex findings into actionable reports for security and engineering teams.

This full-time role requires 7+ years of experience and deep knowledge of Go, Rust, C/C++, Python,