Senior Exploit Developer — DCART / Advanced Red Cyber

Omniscius Consulting; Fort Belvoir (VA); On-site; USD 100,000 - 150,000; Full time

Job summary

Omniscius Consulting is seeking a Senior Exploit Developer in Fort Belvoir, VA. The role involves designing, building, and validating exploit and implant toolchains for red team operations informing DoD mission-assurance. Candidates must have experience in exploit development, proficiency in C/C++ and assembly, and an active TS/SCI clearance. The work includes developing exploit code, testing payloads against detection, and integrating exploits within operational toolchains. Strong candidates may also have experience with C2 frameworks like Cobalt Strike.

Qualifications

• Active TS/SCI clearance, must be a U.S. citizen.
• Ability to pass the DCART Senior Developer Aptitude Test (SDAT).
• Experience in building operational-grade implants and delivery pipelines.

Responsibilities

• Design, build, and validate exploit and implant toolchains for red team operations.
• Develop exploit code, in-memory loaders, and covert tooling.
• Test and harden payloads to minimize detection by EDR/AV.
• Integrate exploits into operational toolchains and assist during live assessments.
• Produce technical annexes and concise briefings.

Skills

Exploit development experience (memory corruption, ROP, bypass mitigations)

Proficient in C/C++

Assembly language

Windows internals (kernel & Win32 APIs)

C2 frameworks (Cobalt Strike)

Job description

Senior Exploit Developer — DCART / Advanced Red Cyber

• Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).

Our client is seeking a Senior Exploit Developer in Fort Belvoir, VA. to design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission-assurance decisions.

• Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
• Test and harden payloads to minimize detection by EDR/AV.
• Integrate exploits into operational toolchains and assist operators during live assessments.
• Produce technical annexes and concise executive/technical briefings.

Requirements

• Active TS/SCI (U.S. citizen)
• Proficient in C/C++, assembly, and Windows internals (kernel & Win32 APIs).
• Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
• Ability to pass the DCART Senior Developer Aptitude Test (SDAT).

Desired

• Experience with C2 frameworks; Cobalt Strike experience is a plus (nice-to-have, not mandatory).
• OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds.
• Experience building operational-grade implants and delivery pipelines.
• Apply: cleared resume, 1–2-pagetechnical write-up (no classified info), and readiness for SDAT.