Vulnerability Researcher

The Applied Research Laboratory at Penn State University; State College (Centre County); On-site; USD 86,300 - 191,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Retirement plans

Paid time off

75% tuition discount for employees

Job summary

The Applied Research Laboratory at Penn State University is seeking a self-motivated Vulnerability Researcher to join our Cyberspace Operations Research Department. This role focuses on evaluating adversarial tactics and enhancing system security for Navy and DoD.

You'll research new exploitation techniques, develop proof-of-concept tools, and guide lower-level engineers. A Bachelor’s Degree in Engineering or Science is required, along with relevant experience and an active TS/SCI security clearance.

Qualifications

• Experience in reverse engineering and vulnerability testing tools.
• Strong knowledge of computer networking fundamentals and operating systems.
• Ability to express technical information clearly.

Responsibilities

• Research cutting-edge techniques and technologies for system exploitation.
• Leverage expertise in reverse engineering and vulnerability research.
• Assist in maintaining relationships with sponsors.

Skills

Reverse engineering

Vulnerability research

Malware analysis

Programming in C, Java, or Python

Cyber operations architecture

Active government security clearance

Education

Bachelor’s Degree in Engineering or Science

Tools

Ghidra

IDA

Kali Linux

Angr/AFL++

QEMU/Unicorn

Atlassian products

Job description

Overview

We are searching for a self‑motivated Vulnerability Researcher to join our Cyberspace Operations Research Department at the Applied Research Laboratory (ARL) at Penn State University. The role focuses on adversarial tactics, techniques, and procedures to support system evaluation and security hardening for Navy, DoD, and intelligence partners.

Responsibilities

• Research cutting‑edge techniques and technologies for system exploitation.
• Leverage expertise in reverse engineering, vulnerability research, and software development to address established needs and investigate emerging requirements.
• Apply software engineering best practices to create proof‑of‑concept tools and configure test environments to perform demonstrations to sponsors and partners.
• Assist the Cyberspace Operations Research Department Head in maintaining relationships with sponsors through on‑site technical discussions, preparation and presentation of technical materials, and project‑related correspondence.
• Provide process enhancement for technical functionality evaluation, vulnerability analyses, cyberspace operations engineering, and penetration testing projects.
• Apply project management principles and methods to the leadership of tasks or projects.
• Provide guidance to lower‑level engineers to foster professional growth.

Additional Responsibilities for Higher Level

• Understand broad strategic objectives and contribute to them; nurture and maintain relationships with major customers/grantors of external research and development grant funding.
• Identify grant/project follow‑on work and persuade customers/grantors to fund; impact customer decisions and strategies.
• Initiate new project concepts and seek funding; develop technical proposals and make presentations to customers/grant sponsors.
• Mentor department staff in the development of technical, project, and business development skills.

Required Skills / Experience

• Documented application of reverse engineering and vulnerability testing tools (e.g., Ghidra/IDA, Kali Linux, Angr/AFL++, QEMU/Unicorn).
• Reverse engineering, vulnerability research, malware analysis, and/or CNO tool development.
• Computer networking fundamentals, Windows and UNIX operating systems, x86(64) and ARM or MIPS architectures.
• Cyber operations architecture and software engineering practices.
• Programming languages and development environments (C, Java, or Python at minimum).
• Ability to express technical information clearly and concisely in documents and presentations for senior leaders.
• Active government security clearance at TS/SCI level with eligibility for special accesses.

Preferred Skills / Experience

• Cybersecurity exploit development and test environment configuration.
• Cybersecurity penetration testing / Red Team testing / white‑hat hacking.
• Military cyberspace operations or computer network operations.
• Demonstrated history of successful project initiation efforts.
• Agile software development methodology and tools.
• Atlassian products (e.g., JIRA, Confluence).

Location & Work Arrangement

Your working location will be fully on‑site in Reston, VA, but occasional hybrid work will be possible depending on project‑dependent ability. This position requires periodic travel to remote sites for testing.

Minimum Education & Experience

For Research and Development Engineer - Senior Professional: Bachelor’s Degree in Engineering or Science, 14+ years relevant experience.
For Research and Development Engineer - Advanced Professional: Bachelor’s Degree in Engineering or Science, 5+ years relevant experience.
For Research and Development Engineer - Intermediate Professional: Bachelor’s Degree in Engineering or Science, 2+ years relevant experience.

Background Checks / Clearances

All positions require successful completion of background checks. Candidates must be U.S. citizens, able to obtain a government security clearance (TS/SCI). A pre‑employment drug screen will be required.

Salary & Benefits

The salary range for this position is $86,300.00 – $191,000.00. Additional benefits include medical, dental, vision coverage, retirement plans, paid time off, and a 75% tuition discount for employees and eligible family members.

EEO Statement

Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814‑865‑1473.