Senior Vulnerability Researcher

Nightwing; Annapolis (MD); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k plan

PTO

Holidays

Job summary

Nightwing seeks a Vulnerability Researcher to identify zero-day vulnerabilities and analyze programmatic behaviors using advanced systems. You will research data, design vulnerability techniques, and apply fuzzing and code-analysis tools in a security-focused environment.

TS/SCI with FSP Poly clearance is required. Ideal candidates hold a BS in a related field, 8+ years of experience, and hands-on experience with Ghidra/IDA, GDB/WinDbg, Python, C/C++, and security research practices.

Qualifications

• BS in CS/CE/EE or related technical field.
• 8+ years in a technology-related environment.
• Experience discovering 0-day vulnerabilities or CVEs attributed to themselves.
• Proven history in vulnerability research.
• Experience with fuzzers: AFL, LibFuzzer, ClusterFuzz, oss-fuzz.
• Experience with code analysis tools: CodeQL, Joern, Semgrep.
• History of exploiting or productizing 0-day vulnerabilities.
• History of exploiting or productizing n-day vulnerabilities/CVEs.
• Reverse engineering malware or code for CNE purposes.

Responsibilities

• Use advanced systems to find zero-day vulnerabilities.
• Analyze, design, and identify programmatic behaviors.
• Develop, test, and debug software applications.
• Research data and propose new vulnerability techniques.
• Apply debugging and fuzzing concepts in work.

Skills

Zero-day discovery

Fuzzing techniques

Code analysis

Reverse engineering

C/C++ programming

Python programming

Ghidra/IDA/Binary Ninja

GDB/WinDbg debugging

ARM/MIPS familiarity

CTF participation

Education

BS in CS/CE/EE or related

Tools

AFL

LibFuzzer

ClusterFuzz

oss-fuzz

CodeQL

Joern

Semgrep

Ghidra

IDA Pro

Binary Ninja

GDB

WinDbg

VsCode

Visual Studio

VIM/Emacs

Job description

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

Job Description Vulnerability Researcher

Use advanced systems to find zero-day (O-day) vulnerabilities. Responsible for analyzing, designing, and identifying programmatic behaviors. Have an opportunity to develop, test, and debug software applications. Research data and provide new design ideas for vulnerability techniques. Understands terminologies like debugging and fuzzing and applying it into your work.

Security Clearance

TS/SCI with FSP Poly

Required Skills

• Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field
• At least 8 years of practical experience in a technology-related environment
• 0-day vulnerabilities or CVEs discovered and attributed to themselves
• History performing vulnerability research
• Experience with writing or using fuzzers – AFL, LibFuzzer, ClusterFuzz, oss-fuzz
• Experience with code analysis tools – CodeQL, Joern, Semgrep
• History of exploiting or productizing 0-day vulnerabilities
• History of exploiting or productizing n-day vulnerabilities/CVEs/publicly disclosed vulnerabilities
• History of reverse engineering malware or other code for CNE purpose
  • Experience with reverse engineering tools – Ghidra, Ida Pro, Binary Ninja
  • Experience using debuggers – GDB or WinDbg
  • Experience writing, navigating, and building C/C++ code, Python
  • Experience with tools like VsCode, Visual Studio, VIM/Emacs
• Familiarity with ARM or MIPS architectures and Linux variants
• Bonus points if they list participating in CTF competitions as those leverage a lot these skills

What We Offer

Whether you’re just starting out on your career journey or are an experienced professional, we offer a total rewards package that goes above and beyond with compensation; healthcare, wellness, retirement and work/life benefits; career development and recognition programs.

Previously part of a leading Fortune 100 company and headquartered in Dulles, VA; Nightwing became independent in 2024 but continues to support the nation’s most impactful mission initiatives.

When we formed Nightwing, we brought a deep set of credentials and an unfaltering commitment to the mission.
At Nightwing, we value collaboration and teamwork. You’ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.
Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.

The salary associated with this position $99,000-$206,000 is commensurate with the selected candidate’s qualifications, years of relevant experience, and demonstrated level of expertise. Compensation will be determined based on these factors to ensure alignment with skills, responsibilities, and market standards.

Nightwing offers medical, vision and dental insurance coverage in addition to a 401k plan, PTO, Holidays, and additional insurances.

At Nightwing, we value collaboration and teamwork. You’ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.

Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.

Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.