Senior Vulnerability Research Lead - Embedded & Hardware

GrammaTech; Herndon (VA); On-site; USD 175,000 - 220,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with company contributions

Paid holidays

PTO / personal leave

Bonus opportunities

Job summary

GrammaTech is seeking a Lead Vulnerability Researcher in Herndon, VA to guide investigations across hardware, software, and operations. You will mentor engineers, develop PoC code, and reverse‑engineer embedded systems to uncover vulnerabilities with real‑world impact.

The role requires on‑site presence at the Linthicum, MD site or GrammaTech HQ in Herndon. A doctorate or master’s with extensive experience is preferred, along with strong C/C++, Python, and ISA skills.

Qualifications

• Doctorate or Master’s with 6+ years or Bachelor’s with 8+ years in relevant fields.
• Experience in computer security, vulnerability analysis, or reverse‑engineering.
• Proficiency in C/C++, Python, and at least one ISA (x86/ARM/MIPS).
• Proficiency with Linux command line and standard debugging tools.

Responsibilities

• Lead vulnerability research across hardware, software, personnel, and physical security.
• Develop PoC code for identified vulnerabilities.
• Reverse‑engineer embedded systems to identify flaws.
• Review code for risks and vulnerabilities and analyze impacts.
• Propose countermeasures and produce technical reports and briefings.
• Mentor junior engineers and review technical approaches.

Skills

C/C++

Python

ISA knowledge

Linux CLI

Decompiler tools

Vulnerability tools

Debugger tools

Education

Doctorate in Computer Science or Engineering

Master’s degree in related field

Bachelor’s degree in related field

Associate’s degree + 10 years experience

Tools

IDA Pro

Binary Ninja

Ghidra

Emulators

Fuzzers

GDB

WinDbg

Job description

GrammaTech is seeking a Lead Vulnerability Researcher in Herndon, VA to guide investigations across hardware, software, and operations. You will mentor engineers, develop PoC code, and reverse‑engineer embedded systems to uncover vulnerabilities with real‑world impact.

The role requires on‑site presence at the Linthicum, MD site or GrammaTech HQ in Herndon. A doctorate or master’s with extensive experience is preferred, along with strong C/C++, Python, and ISA skills.