Vulnerability Research Engineer: Red Team Exploitation

The Pennsylvania State University; Ferguson Township (PA); Hybrid; USD 127,000 - 277,000; Full time

Job summary

The Pennsylvania State University is seeking a Vulnerability Researcher to join the Cyberspace Operations Research Department of the Applied Research Laboratory (ARL) in State College, PA. On-site work with occasional hybrid arrangements and travel to remote locations may be required.

Responsibilities include researching advanced exploitation techniques, performing vulnerability research and malware analyses, developing proof‑of‑concept tools, and presenting technical materials to sponsors.

Qualifications

• Documented reverse engineering and vulnerability testing experience.
• Experience in malware analysis and/or CNO tool development.
• Knowledge of Windows and Unix OS, and CPU architectures.
• Ability to communicate technical concepts to senior leaders clearly.

Responsibilities

• Research edge techniques for system exploitation and security hardening.
• Leverage RE, vulnerability research, and software development to address needs.
• Create proof-of-concept tools and configure test environments for demonstrations.
• Support sponsors with on-site technical discussions and presentations.
• Provide guidance to junior engineers and lead project tasks.
• Apply project management methods to leadership of tasks or projects.

Skills

Reverse engineering

Vulnerability testing

Malware analysis

CNO tool development

Networking fundamentals

Windows & Unix

Technical communication

TS/SCI clearance

Education

Bachelor's Degree

Tools

Ghidra

IDA

Kali Linux

Angr

AFL++

QEMU

Unicorn

Job description

The Pennsylvania State University is seeking a Vulnerability Researcher to join the Cyberspace Operations Research Department of the Applied Research Laboratory (ARL) in State College, PA. On-site work with occasional hybrid arrangements and travel to remote locations may be required.

Responsibilities include researching advanced exploitation techniques, performing vulnerability research and malware analyses, developing proof‑of‑concept tools, and presenting technical materials to sponsors.