Senior Exploit Developer – Red Team Toolchains (Hybrid)

BeyondSOF; Arlington, Northern (VA, KY); Hybrid; USD 160,000 - 230,000; Full time

Job summary

BeyondSOF in the Arlington area seeks a senior developer to design, build, and validate exploit and implant toolchains used in adversary emulation. You will empower red team operations informing senior DoD mission‑assurance decisions.

Active TS/SCI clearance and deep knowledge of Windows internals, memory exploitation, and covert tooling are required; DCART SDAT must be passed. Travel ~5% is expected.

Qualifications

• Active TS/SCI clearance (U.S. citizen).
• Proficient in C/C++, assembly and Windows internals (kernel & Win32 APIs).
• Exploit development experience (memory corruption, ROP, bypass mitigations).
• Ability to pass the DCART Senior Developer Aptitude Test (SDAT).

Responsibilities

• Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
• Test and harden payloads to minimize detection by EDR/AV.
• Integrate exploits into operational toolchains and assist operators during live assessments.
• Produce technical annexes and concise executive/technical briefings.

Skills

C/C++

Assembly

Windows internals

Exploit development

Memory corruption

ROP

Bypass mitigations

C2 frameworks

Cobalt Strike

OSCP

Job description

BeyondSOF in the Arlington area seeks a senior developer to design, build, and validate exploit and implant toolchains used in adversary emulation. You will empower red team operations informing senior DoD mission‑assurance decisions.

Active TS/SCI clearance and deep knowledge of Windows internals, memory exploitation, and covert tooling are required; DCART SDAT must be passed. Travel ~5% is expected.