Senior Cloud & Container Vulnerability Researcher

CACI International Inc.; Florham Park (NJ); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI International Inc. is seeking a Senior Vulnerability Researcher (Cloud & Containers) to lead security research on cloud-native architectures and container runtimes.

You will hunt for vulnerabilities in Kubernetes-based systems and contribute to national cybersecurity efforts with automated and manual analysis. The role requires deep expertise in Linux kernel internals, OCI runtimes, and memory analysis, with hands-on tooling in Python and disassembly/decompilation workflows.

Qualifications

• 7+ years of professional experience in vulnerability research, software exploitation, or low-level engineering.
• Proven track record of finding vulnerabilities in distributed systems, virtualization layers, or container runtimes.
• Experience with Kubernetes security architecture and service mesh implementations (Istio, Linkerd).
• Strong Python for scripting and automation; background in cloud provider security (AWS, Azure, or GCP).

Responsibilities

• Investigate edge-case behaviors in containerized environments and low-level system initialization logic to reveal hidden attack surfaces.
• Conduct deep-dive research into OCI runtimes (runc, crun) and Linux kernel primitives (namespaces, cgroups, eBPF) to identify breakout and privilege escalation paths.
• Develop custom tools and scripts (primarily in Python3) to automate research workflows, protocol decoding, and memory analysis.
• Document findings clearly and translate technical complexity into actionable reports for security and engineering teams.

Job description

CACI International Inc. is seeking a Senior Vulnerability Researcher (Cloud & Containers) to lead security research on cloud-native architectures and container runtimes.

You will hunt for vulnerabilities in Kubernetes-based systems and contribute to national cybersecurity efforts with automated and manual analysis. The role requires deep expertise in Linux kernel internals, OCI runtimes, and memory analysis, with hands-on tooling in Python and disassembly/decompilation workflows.