Senior Exploit Developer — DCART / Advanced Red Cyber

BeyondSOF; Arlington, Northern (VA, KY); Hybrid; USD 160,000 - 230,000; Full time

Job summary

BeyondSOF in the Arlington area seeks a senior developer to design, build, and validate exploit and implant toolchains used in adversary emulation. You will empower red team operations informing senior DoD mission‑assurance decisions.

Active TS/SCI clearance and deep knowledge of Windows internals, memory exploitation, and covert tooling are required; DCART SDAT must be passed. Travel ~5% is expected.

Qualifications

• Active TS/SCI clearance (U.S. citizen).
• Proficient in C/C++, assembly and Windows internals (kernel & Win32 APIs).
• Exploit development experience (memory corruption, ROP, bypass mitigations).
• Ability to pass the DCART Senior Developer Aptitude Test (SDAT).

Responsibilities

• Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
• Test and harden payloads to minimize detection by EDR/AV.
• Integrate exploits into operational toolchains and assist operators during live assessments.
• Produce technical annexes and concise executive/technical briefings.

Skills

C/C++

Assembly

Windows internals

Exploit development

Memory corruption

ROP

Bypass mitigations

C2 frameworks

Cobalt Strike

OSCP

Job description

Location: "Hybrid in Arlington area"

Clearance: Active TS/SCI required

Travel: ~5%

The Mission

Design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission‑assurance decisions.

What You’ll Do

• Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
• Test and harden payloads to minimize detection by EDR/AV.
• Integrate exploits into operational toolchains and assist operators during live assessments.
• Produce technical annexes and concise executive/technical briefings.

Required

• ActiveTS/SCI(U.S. citizen).
• Proficient in C/C++, assembly, and Windows internals (kernel & Win32 APIs).
• Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
• Ability to pass theDCART Senior Developer Aptitude Test (SDAT).

Preferred

• Experience with C2 frameworks;Cobalt Strike experience is a plus(nice-to-have, not mandatory).
• OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds.
• Experience building operational-grade implants and delivery pipelines.