Vulnerability Researcher

BigBear.ai; Maryland; On-site; USD 90,000 - 130,000; Full time

Job summary

BigBear.ai is looking for an elite Vulnerability Researcher in Maryland with an active TS/SCI with Poly clearance. The role involves uncovering vulnerabilities in hardware and software, analyzing source code, and developing proof-of-concept exploits. Candidates need at least 5 years of technical experience, strong programming skills (Assembly, C, C++, Python), and a Bachelor’s in Computer Science or related field. Join us to contribute to groundbreaking projects supporting national security missions.

Qualifications

• 5 years of technical experience with a B.S. in a technical discipline.
• 4 years programming experience in a production environment.
• Experience in reverse engineering hardware or software.

Responsibilities

• Debug software and analyze programmatic flow to uncover vulnerabilities.
• Perform in-depth source code analysis to document findings.
• Create proof-of-concept exploits against research targets.

Skills

Assembly programming

C programming

C# programming

C++ programming

Perl programming

Python programming

Reverse engineering

Technical presentation

Education

Bachelor's Degree in Computer Science or related field

Job description

Overview

Do you have a passion for uncovering hidden vulnerabilities and pushing the boundaries of cybersecurity research? Are you the kind of researcher who sees every system as a puzzle waiting to be solved? If so, BigBear.ai wants you on our team! We're seeking an elite Vulnerability Researcher that has an active TS/SCI with Poly clearance to join our cutting‑edge team and deliver groundbreaking engineering and vulnerability research results that directly support national security missions. This is your chance to work on some of the most challenging and exciting research projects in the industry, discovering initial access capabilities and developing proof‑of‑concept exploits that make a real difference.

What You Will Do

Why This Role Is Unique

• Work on classified, mission‑critical research that directly impacts national security.
• Collaborate with elite teams of engineers and researchers who are passionate about pushing the boundaries of technology.
• Have the freedom to explore and innovate, discovering previously unknown vulnerabilities across hardware, software, and operating systems.
• See your research make a real difference in protecting national security interests.

What You'll Do

• Hunt for Vulnerabilities: Actively debug software, troubleshoot crashes, and analyze programmatic flow to uncover hidden security flaws in hardware components, software applications, and operating systems.
• Analyze Source Code: Perform in-depth source code analysis to discover software vulnerabilities and author detailed documentation on the impact and severity of each finding.
• Develop Proof‑of‑Concept Exploits: Create and demonstrate compelling proof‑of‑concept exploits against research targets, prototypes, and hands‑on demonstrations of vulnerability analysis results.

What You Need To Have

• Clearance: TS/SCI with Poly (required).
• Experience: With a minimum of 5 years of technical experience and a B.S. in a technical discipline. (4 additional years may be substituted in lieu of a degree.)
• Programming Expertise: Minimum of 4 years of experience programming in Assembly, C, C#, C++, Perl, or Python in a production environment.
• Technical Background: Bachelor's Degree in Computer Science or a related field plus a minimum of 3 years of contiguous experience.
• Reverse Engineering: Demonstrated experience in hardware or software reverse engineering.
• Communication Skills: Demonstrated experience creating and delivering compelling technical presentations to diverse audiences.
• Education: Bachelor's Degree in Computer Science or a related field, OR minimum of 2 years of experience in computer science, information systems, or network engineering.

What We'd Like You To Have

• Proven Track Record: Demonstrated ability to discover multiple previously unknown vulnerabilities across multiple versions of similar technologies — the more obscure, the better!
• Innovative Mindset: A relentless passion for pushing the boundaries of vulnerability research and developing creative solutions to the most complex challenges.
• Collaborative Spirit: A desire to share knowledge and collaborate with a team of like‑minded researchers who are equally passionate about cybersecurity.

About BigBear.ai

BigBear.ai is a leading provider of AI‑powered decision intelligence solutions for national security, supply chain management, and digital identity. Customers and partners rely on BigBear.ai’s predictive analytics capabilities in highly complex, distributed, mission‑based operating environments. Headquartered in McLean, Virginia, BigBear.ai is a public company traded on the NYSE under the symbol BBAI. For more information, visit https://bigbear.ai/.

BigBear.ai is an Equal opportunity employer, supporting all protected classes, including veterans and individuals with disabilities.