Senior Vulnerability Researcher & Exploit Analyst

Gormat; Corridor North (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

Gormat is seeking a seasoned vulnerability researcher to join our cyber capability development program. You will conduct advanced research on target software and hardware to identify exploitable weaknesses and validate findings with proof-of-concept exploits.

This role requires TS/SCI with poly, deep expertise in disassembly and dynamic analysis, and the ability to document technical results for both technical and operational audiences, with occasional travel as needed.

Qualifications

• Active TS/SCI with Poly clearance.
• Bachelor’s degree and 10+ years of related experience; Master’s +8+ years acceptable.
• Expert proficiency with disassemblers/decompilers (IDA Pro, Ghidra, Binary Ninja).
• Strong knowledge of x86/x64/ARM assembly.
• Experience with fuzzing frameworks and dynamic analysis.
• Proven ability to document technical research for diverse audiences.

Responsibilities

• Conduct advanced vulnerability research and reverse engineering on software and hardware.
• Analyze target platforms and discover zero-days through fuzzing and code analysis.
• Reverse engineer apps, firmware, and hardware using disassemblers.
• Develop proof-of-concept exploits to validate findings.
• Analyze architectures, protocols, and security mechanisms for attack surfaces.
• Document vulnerability details and recommended approaches.
• Provide technical briefs to capability developers on weaknesses and exploitation pathways.
• Collaborate with teams to translate research into operational tools.
• Stay aware of public disclosures and adversary tradecraft.

Skills

TS/SCI with Poly

Assembly language (x86/x64/ARM)

Scripting (Python/Ruby)

Vulnerability research

Technical writing

Education

Bachelor's degree in related field

10+ years experience

Master's degree

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

LLDB

AFL

libFuzzer

Honggfuzz

Job description

Gormat is seeking a seasoned vulnerability researcher to join our cyber capability development program. You will conduct advanced research on target software and hardware to identify exploitable weaknesses and validate findings with proof-of-concept exploits.

This role requires TS/SCI with poly, deep expertise in disassembly and dynamic analysis, and the ability to document technical results for both technical and operational audiences, with occasional travel as needed.