Vulnerability Researcher

Gormat; Corridor North (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

Gormat is seeking a seasoned vulnerability researcher to join our cyber capability development program. You will conduct advanced research on target software and hardware to identify exploitable weaknesses and validate findings with proof-of-concept exploits.

This role requires TS/SCI with poly, deep expertise in disassembly and dynamic analysis, and the ability to document technical results for both technical and operational audiences, with occasional travel as needed.

Qualifications

• Active TS/SCI with Poly clearance.
• Bachelor’s degree and 10+ years of related experience; Master’s +8+ years acceptable.
• Expert proficiency with disassemblers/decompilers (IDA Pro, Ghidra, Binary Ninja).
• Strong knowledge of x86/x64/ARM assembly.
• Experience with fuzzing frameworks and dynamic analysis.
• Proven ability to document technical research for diverse audiences.

Responsibilities

• Conduct advanced vulnerability research and reverse engineering on software and hardware.
• Analyze target platforms and discover zero-days through fuzzing and code analysis.
• Reverse engineer apps, firmware, and hardware using disassemblers.
• Develop proof-of-concept exploits to validate findings.
• Analyze architectures, protocols, and security mechanisms for attack surfaces.
• Document vulnerability details and recommended approaches.
• Provide technical briefs to capability developers on weaknesses and exploitation pathways.
• Collaborate with teams to translate research into operational tools.
• Stay aware of public disclosures and adversary tradecraft.

Skills

TS/SCI with Poly

Assembly language (x86/x64/ARM)

Scripting (Python/Ruby)

Vulnerability research

Technical writing

Education

Bachelor's degree in related field

10+ years experience

Master's degree

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

LLDB

AFL

libFuzzer

Honggfuzz

Job description

What You'll Be Doing:

• Conduct advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development.
• Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
• Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
• Develop proof-of-concept exploits to validate vulnerability findings and assess operational utility.
• Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
• Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.
• Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.
• Collaborate with capability development teams to translate vulnerability research into operational tools.
• Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
• Conduct limited TDY travel as mission requires.

What Required Skills You'll Bring:

• Active TS/SCI with Poly
• Bachelor's degree in related technical field and 10+ years of related professional experience; Master's degree and 8+ years.
• Expert proficiency with disassemblers/decompilers (IDA Pro, Ghidra, Binary Ninja)
• Strong understanding of x86/x64/ARM assembly language and processor architectures
• Practical experience with debuggers (WinDbg, GDB, LLDB) and dynamic analysis tools
• Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust applications)
• Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions)
• Proficiency with fuzzing frameworks such as AFL, libFuzzer, Honggfuzz and corpus management
• Strong scripting skills (Python, Ruby, or similar) for automation and analysis
• Experience documenting technical research for both technical and operational audiences

What Desired Skills You'll Bring:

• Experience with Windows kernel/driver reverse engineering
• Firmware analysis and embedded systems reverse engineering
• Network protocol analysis and vulnerability research
• Experience with UEFI/BIOS or bootloader security analysis
• Published vulnerability research (CVEs, conference presentations, blog posts)
• Familiarity with symbolic execution and taint analysis tools
• Understanding of offensive cyberspace operations workflows

TS/SCI with polygraph is required.