Senior Vulnerability Research & Exploitation Engineer

Grvty; Annapolis (MD); On-site; USD 180,000 - 230,000; Full time

Job summary

GRVTY is seeking a Vulnerability & Exploitation Specialist in Annapolis Junction, MD. The role targets candidates with 0-day vulnerability disclosures or CVEs they discovered or contributed to, including exploitation work.

Required active TS/SCI with Poly clearance and extensive experience in vulnerability research, fuzzing, reverse engineering, and C/C++ tooling. Proficiency in Python and various reverse-engineering tools is highly valued.

Qualifications

• Active TS/SCI with Polygraph Clearance.
• Experience discovering 0-day vulnerabilities or CVEs attributed to themselves.
• History performing vulnerability research.
• Experience with fuzzers – AFL, LibFuzzer, ClusterFuzz, oss-fuzz.
• Experience with code analysis tools – CodeQL, Joern, Semgrep.
• History of exploiting or productizing 0-day vulnerabilities.
• History of exploiting or productizing n-day CVEs/public vulnerabilities.
• History of reverse engineering malware or code for CNE purposes.
• Experience with reverse engineering tools – Ghidra, Ida Pro, Binary Ninja.
• Experience using debuggers – GDB or WinDbg.
• Experience writing, navigating, and building C/C++ code.
• Experience with VSCode, Visual Studio, VIM/Emacs.
• Familiarity with ARM or MIPS architectures and Linux variants.
• Proficiency in Python for tooling.

Skills

0-day CVEs

Vulnerability research

Fuzzing tools

Code analysis

Exploit development

Reverse engineering

Debuggers

C/C++ programming

Python scripting

ARM/MIPS familiarity

Tools

Ghidra

IDA Pro

Binary Ninja

GDB

WinDbg

VSCode

Visual Studio

VIM/Emacs

CodeQL

Joern

Semgrep

oss-fuzz

Job description

GRVTY is seeking a Vulnerability & Exploitation Specialist in Annapolis Junction, MD. The role targets candidates with 0-day vulnerability disclosures or CVEs they discovered or contributed to, including exploitation work.

Required active TS/SCI with Poly clearance and extensive experience in vulnerability research, fuzzing, reverse engineering, and C/C++ tooling. Proficiency in Python and various reverse-engineering tools is highly valued.