Senior Security Researcher

Webster & Webster Associates; Washington (District of Columbia); On-site; USD 130,000 - 160,000; Full time

Job summary

Webster & Webster Associates is seeking a Senior Security Researcher to lead advanced security research initiatives. This role involves collaborating with elite engineers to identify vulnerabilities in hardware and software while contributing to cutting-edge threat intelligence.

The candidate should have 5+ years of experience in vulnerability research, a Bachelor's Degree in Computer Science, and proficiency in C/C++ and Python. This position requires strong analytical skills and leadership capabilities.

Qualifications

• 5+ years of professional experience in vulnerability research, software, or hardware reverse engineering.
• Experience with advanced binary analysis tools.
• Ability to lead and mentor junior researchers.

Responsibilities

• Lead research teams through complex security analysis.
• Perform analysis to identify flaws in hardware‑interfacing software.
• Design proofs‑of‑concepts and exploits to validate security gaps.
• Architect solutions to detect advanced persistent threats.
• Engineer frameworks for vulnerability discovery.

Skills

C/C++ proficiency

Python development

Assembly languages (ARM, MIPS, x86)

Vulnerability research

Reverse engineering

Curiosity

Leadership and mentoring

Education

Bachelor’s Degree in Computer Science or equivalent

Tools

IDA Pro

Ghidra

Binary Ninja

Job description

An innovative technology company is seeking a Senior Security Researcher. In this role, you will lead advanced security research initiatives focusing on hardware and software integrity. You will collaborate with other elite engineers to identify firmware‑based vulnerabilities, analyze zero‑day vectors, and help build defensive countermeasures for mission‑critical infrastructure. This position offers the opportunity to contribute to cutting‑edge threat intelligence and protection mechanisms for global systems while working in a collaborative and technically sophisticated environment.

Key Responsibilities

• Direct and mentor research teams through complex security analysis cycles to ensure high‑impact project delivery.
• Perform deep‑dive static and dynamic analysis to identify novel flaws in hardware‑interfacing software and firmware.
• Design sophisticated proofs‑of‑concept and exploits to validate security gaps, demonstrating risks like privilege escalation or unauthorized code execution.
• Architect and implement robust security solutions designed to detect and thwart advanced persistent threats in real‑time.
• Engineer custom software frameworks to automate vulnerability discovery and code auditing within low‑level codebases.
• Navigate ambiguous technical challenges to advance the state of the art in system‑wide security architectures.
• Provide expert security reporting and occasional travel to support on‑site project milestones and hardware analysis.
• Communicate highly technical research findings to internal stakeholders and external partners through detailed documentation.
• Participate in hands‑on hardware testing and research execution requiring physical presence at our specialized facilities.

Core Qualifications

• Bachelor’s Degree in Computer Science, Computer/Electrical Engineering, or equivalent experience.
• 5+ years of professional experience in vulnerability research, software, or hardware reverse engineering.
• Proficiency in C/C++ and Python for low‑level development and exploit tooling.
• Expertise in assembly languages such as ARM, MIPS, or x86.
• Experience with advanced binary analysis tools like IDA Pro, Ghidra, or Binary Ninja.
• Curiosity and high self‑initiative in a research‑heavy environment.
• Ability to lead, mentor, and guide junior researchers.
• Familiarity with firmware security, cryptography, and hardware‑software interfaces such as I2C, UART, SPI.
• Active security clearance preferred or the ability to obtain one.

If you are a results‑driven professional who thrives on the challenge of identifying vulnerabilities and is ready to take full ownership of mission‑critical security research, we want to hear from you.