Senior Vulnerability Researcher

Redhorse Corp.; Herndon (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

A cybersecurity firm is seeking a Senior Vulnerability Researcher to drive cyber missions supporting national security. The ideal candidate has over seven years of experience in vulnerability research, active TS/SCI clearance, and expertise in programming across Windows and Linux/Unix. Responsibilities include applying VR techniques, developing proof-of-concept solutions, and performing vulnerability assessments. This role requires exceptional communication skills and the ability to mentor junior personnel while fostering a culture of growth.

Qualifications

• Seven or more years of professional experience in vulnerability research.
• Active TS/SCI security clearance is required.
• Proficiency in programming within contemporary Windows and Linux/Unix environments.

Responsibilities

• Identify vulnerabilities using various VR techniques.
• Develop proof-of-concept software and creative solutions.
• Perform vulnerability assessments of secure technologies.

Skills

Vulnerability research techniques

Reverse engineering

Vulnerability exploitation

Communication skills

Programming in C/C++, Java, JavaScript

Tools

IDA Pro

OllyDbg

Windbg

Job description

About the Role

Redhorse is transforming how the government utilizes data and technology. We are seeking a self‑motivated Senior Vulnerability Researcher who is ready to solve some of the most challenging technical problems in a fast‑paced environment supporting national security.

In this role, you will be a key driver of our cyber mission, applying advanced vulnerability research (VR), reverse engineering (RE), and vulnerability exploitation (VE) skills to support critical defensive and offensive cyber requirements. As a senior member of our team, you will operate with a high degree of autonomy, solving complex problems with minimal oversight while mentoring the next generation of technical talent. Your work will directly impact the safety and efficacy of national security operations.

Key Responsibilities

• Apply a variety of VR techniques—including fuzzing, RE, and online research—to identify vulnerabilities and determine exploitability.
• Develop proof‑of‑concept software and creative solutions to meet diverse customer requirements.
• Perform vulnerability assessments of secure technologies to determine if protected or inaccessible information is recoverable.
• Manage customer expectations by implementing proactive feedback mechanisms and providing technical insights.
• Prepare and deliver concise presentations and reports summarizing research findings for technical and non‑technical stakeholders.
• Collaborate with internal and external stakeholders to identify and communicate operational requirements.
• Shape Computer Architecture (CA) requirements to ensure they align with broader operational goals.
• Synthesize technical and operational information to develop innovative solutions for complex cyber challenges.
• Mentor junior personnel, providing technical guidance and fostering a culture of continuous learning.

Required Experience/Clearance

• Active TS/SCI security clearance.
• Seven (7)+ years of professional experience in vulnerability research.
• Proven expertise in programming within contemporary Windows and Linux/Unix environments.
• Proficiency in multiple languages including C, C++, Java, and JavaScript.
• Extensive experience using reverse engineering tools such as IDA Pro, OllyDbg, and Windbg.
• Demonstrated experience reverse engineering Windows/Linux applications and OS kernel modules.
• Exceptional written and oral communication skills, with the ability to explain complex technical concepts clearly.

Desired Experience

• Experience with network protocol analysis and deep‑packet inspection.
• Static and dynamic malware analysis experience for mobile platforms, specifically iOS and Android.
• Knowledge of software engineering with a focus on workflow automation for existing security tools.
• Proficiency in identifying discreet, complex communications technologies that support investigative techniques.
• Advanced Vulnerability Exploitation (VE) capabilities, including understanding the relationship between analysis concepts and computational resource requirements.

Equal Opportunity Employer

Redhorse Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class.