Vulnerability Researcher

Redhorsecorp; Herndon (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Redhorse Corporation seeks a Senior Vulnerability Researcher to advance research across Windows and Linux, performing VR, RE, and VE to support national security missions. The role requires mentoring, high-impact research, and collaboration with stakeholders to align technical work with operational needs.

Responsibilities include developing PoCs, delivering technical briefings, and assessing vulnerabilities in secure technologies to enable mission success.

Qualifications

• 7+ years of vulnerability research experience.
• Active TS/SCI security clearance.
• 7+ years of programming experience in Windows/Linux environments.
• 7+ years of experience with C, C++, Java, and JavaScript.
• 7+ years using reverse engineering tools such as IDA Pro, OllyDbg, and WinDbg.
• Strong written and oral communication skills.
• Malware analysis experience for mobile platforms (iOS/Android).

Responsibilities

• Apply VR techniques (fuzzing, RE, experimentation) to identify vulnerabilities and exploitability.
• Develop PoC software and prototypes to meet customer requirements.
• Manage customer expectations with proactive feedback and iterative reporting.
• Deliver concise technical presentations of research findings to stakeholders.
• Collaborate with internal/external stakeholders to align research with operational needs.
• Shape capability requirements to ensure solutions meet operational goals.
• Communicate operational requirements to support mission success.
• Perform vulnerability assessments of secure technologies to determine recoverability.

Skills

Vulnerability research

Programming (Windows/Linux)

Reverse engineering

Multi-language development (C/C++/Java

Mobile malware analysis

Technical communication

Security clearance TS/SCI

Tools

IDA Pro

OllyDbg

WinDbg

Job description

About the Organization

Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We're looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.

About the Role

Redhorse transforms the way government uses data and technology. To support this mission, we are seeking a self-motivated Senior Vulnerability Researcher who is ready to solve some of the most challenging technical problems in a fast-paced environment supporting national security.

In this role, you will apply advanced vulnerability research (VR), reverse engineering (RE), and vulnerability exploitation (VE) skills to support a variety of defensive and offensive cyber requirements. As a senior member of our team, you will perform high-impact research with minimal guidance and have the opportunity to mentor junior personnel, directly influencing the technical direction of critical mission objectives.

• Apply a variety of VR techniques - including fuzzing, reverse engineering, and experimentation to identify vulnerabilities and determine exploitability.
• Develop proof-of-concept software and functional prototypes to meet diverse customer requirements.
• Manage customer expectations by implementing proactive feedback mechanisms and iterative reporting.
• Prepare and deliver concise technical presentations summarizing research findings for stakeholders.
• Collaborate with internal and external stakeholders to align research with operational needs.
• Shape Capability (CA) requirements to ensure technical solutions meet broader operational goals.
• Synthesize creative technical solutions from complex operational and technical information.
• Identify and communicate operational requirements to ensure mission success.
• Perform vulnerability assessments of secure technologies to determine if protected or inaccessible information is recoverable.

• 7+ years of experience in vulnerability research.
• Active TS/SCI security clearance.
• 7+ years of expertise in programming within contemporary Windows and Linux/Unix software development environments.
• 7+ years of experience in multiple languages including C, C++, Java, and JavaScript.
• 7+ years of experience using reverse engineering tools such as IDA Pro, OllyDbg, and Windbg.
• Strong written and oral communication skills, with the ability to explain complex technical concepts to non-technical audiences.
• Static and dynamic malware analysis experience for mobile platforms, specifically iOS and Android.

The salary range provided for this position represents the anticipated base salary for successful candidates. Actual compensation will be determined based on a variety of factors, including relevant experience, education, certifications, skills, security clearance level, geographic location, market conditions, and internal equity. In addition to base salary, eligible employees may participate in Redhorse's comprehensive benefits programs and may be eligible for performance-based or other incentive compensation, where applicable.

Redhorse Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition [e-mail]

Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse's changing needs. This job description is not a contract and may be adjusted as deemed appropriate in Redhorse's sole discretion.