Senior Exploit Developer — DCART / Advanced Red Cyber

Beyond SOF; Fort Belvoir (VA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Beyond SOF in the Arlington area is seeking a Senior Developer to design, build, and validate exploit and implant toolchains used in realistic adversary emulation for DoD missions.

You will develop exploit code, in-memory loaders, and persistence mechanisms, test payloads against EDR/AV, and integrate tools into operational deliveries while briefing executives with concise technical annexes.

Qualifications

• Proficient in C/C++, assembly and Windows internals (kernel & Win32 APIs).
• Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
• Ability to pass the DCART Senior Developer Aptitude Test (SDAT).

Responsibilities

• Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
• Test and harden payloads to minimize detection by EDR/AV.
• Integrate exploits into operational toolchains and assist operators during live assessments.
• Produce technical annexes and concise executive/technical briefings.

Skills

C/C++

assembly

Windows internals

Exploit development

SDAT

Job description

Location: "Hybrid in Arlington area"

Clearance: Active TS/SCI required

Travel:~5%

The Mission

Design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission-assurance decisions.

What You’ll Do

• Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
• Test and harden payloads to minimize detection by EDR/AV.
• Integrate exploits into operational toolchains and assist operators during live assessments.
• Produce technical annexes and concise executive/technical briefings.

Required

• ActiveTS/SCI (U.S. citizen).
• Proficient in C/C++, assembly, and Windows internals (kernel & Win32 APIs).
• Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
• Ability to pass theDCART Senior Developer Aptitude Test (SDAT).

Preferred

• Experience with C2 frameworks; Cobalt Strike experience is a plus (nice-to-have, not mandatory).
• OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds.
• Experience building operational-grade implants and delivery pipelines.