Vulnerability & Exploitation Specialist

Grvty; Annapolis (MD); On-site; USD 180,000 - 230,000; Full time

Job summary

GRVTY is seeking a Vulnerability & Exploitation Specialist in Annapolis Junction, MD. The role targets candidates with 0-day vulnerability disclosures or CVEs they discovered or contributed to, including exploitation work.

Required active TS/SCI with Poly clearance and extensive experience in vulnerability research, fuzzing, reverse engineering, and C/C++ tooling. Proficiency in Python and various reverse-engineering tools is highly valued.

Qualifications

• Active TS/SCI with Polygraph Clearance.
• Experience discovering 0-day vulnerabilities or CVEs attributed to themselves.
• History performing vulnerability research.
• Experience with fuzzers – AFL, LibFuzzer, ClusterFuzz, oss-fuzz.
• Experience with code analysis tools – CodeQL, Joern, Semgrep.
• History of exploiting or productizing 0-day vulnerabilities.
• History of exploiting or productizing n-day CVEs/public vulnerabilities.
• History of reverse engineering malware or code for CNE purposes.
• Experience with reverse engineering tools – Ghidra, Ida Pro, Binary Ninja.
• Experience using debuggers – GDB or WinDbg.
• Experience writing, navigating, and building C/C++ code.
• Experience with VSCode, Visual Studio, VIM/Emacs.
• Familiarity with ARM or MIPS architectures and Linux variants.
• Proficiency in Python for tooling.

Skills

0-day CVEs

Vulnerability research

Fuzzing tools

Code analysis

Exploit development

Reverse engineering

Debuggers

C/C++ programming

Python scripting

ARM/MIPS familiarity

Tools

Ghidra

IDA Pro

Binary Ninja

GDB

WinDbg

VSCode

Visual Studio

VIM/Emacs

CodeQL

Joern

Semgrep

oss-fuzz

Job description

GRVTY is seeking a Vulnerability & Exploitation Specialist with a TS/SCI + Poly clearance (applicable to this customer) to join one of our top projects in Annapolis Junction, MD. We are looking for candidates who have discovered a 0-day vulnerabilities or a list of CVEs (public vulnerability disclosures) they discovered or contributed to. We are also looking for any specific work they’ve done exploiting vulnerabilities.

What You Must Have:

• Active TS/SCI with Polygraph Clearance
• Skills/experience listed out in order of priority:
• 0-day vulnerabilities or CVEs discovered and attributed to themselves
• History performing vulnerability research
• Experience with writing or using fuzzers – AFL, LibFuzzer, ClusterFuzz, oss-fuzz
• Experience with code analysis tools – CodeQL, Joern, Semgrep
• History of exploiting or productizing 0-day vulnerabilities
• History of exploiting or productizing n-day vulnerabilities/CVEs/publicly disclosed vulnerabilities
• History of reverse engineering malware or other code for CNE purposes
• Experience with reverse engineering tools – Ghidra, Ida Pro, Binary Ninja Experience using debuggers – GDB or WinDbg
• Experience writing, navigating, and building C/C++ code
• Experience with tools like VsCode, Visual Studio, VIM/Emacs
• Familiarity with ARM or MIPS architectures and Linux variants
• We also use Python to write a lot of our tools, so that is good to see

Pay Range:At GRVTY, we understand that compensation is influenced by many factors—such as geographic location, federal contract labor categories, wage rates, prior experience, skillsets, education, and certifications. We’re proud to offer a work environment that empowers our team to achieve a strong work-life balance. GRVTY provides competitive pay, comprehensive benefits, and meaningful opportunities for professional growth. Our benefits package is designed to support the well-being of our employees and their families, and includes coverage in areas such as healthcare, financial wellness, retirement planning, family assistance, continued education, and paid time off.

• The pay range for this position is: $180,000.00 - $230,000.00