Senior Exploit Developer - Remote Threat Intelligence

VulnCheck; Columbia (MD); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Unlimited PTO

401k with company match

Healthcare coverage

Parental leave

Remote friendly environment

Expense reimbursement for Cell Phone &

Internet

Ongoing professional development

Career advancement

Job summary

VulnCheck is seeking a Senior Exploit Developer to join the Initial Access Intelligence team. You will reverse engineer software to identify root causes of vulnerabilities, and author original exploits for initial access where none exist, helping customers understand exposure from discovery to detection.

This is a 100% remote role prioritizing candidates in US hubs, including Massachusetts, Maryland, or Austin, TX, with a collaborative environment alongside threat researchers.

Qualifications

• Prior experience with writing exploit code for RCE / initial access vulnerabilities (that do not require authentication to exploit).
• Experience working on technical projects remotely, alone, and on small teams.

Responsibilities

• Reverse engineering software to discover the root cause analysis (RCA) of vulnerabilities.
• Authoring original software exploits for initial access vulnerabilities, when little or no publicly-available proof of concept code for exploiting such vulnerabilities exists.
• Implementing detections (such as Suricata & Snort signatures, YARA rules, etc.) for identifying such initial access vulnerabilities being exploited on the wire
• Writing Attack Surface Management (ASM) queries (e.g., Shodan, Census, FOFA, & ZoomEye) for finding vulnerable systems likely to be targeted

Skills

Reverse engineering

Exploit development

RCA

Initial access

Detections

ASM queries

Tools

Suricata

Snort

YARA

Shodan

Census

FOFA

ZoomEye

Job description

VulnCheck is seeking a Senior Exploit Developer to join the Initial Access Intelligence team. You will reverse engineer software to identify root causes of vulnerabilities, and author original exploits for initial access where none exist, helping customers understand exposure from discovery to detection.

This is a 100% remote role prioritizing candidates in US hubs, including Massachusetts, Maryland, or Austin, TX, with a collaborative environment alongside threat researchers.