Vulnerability Researcher: Mid-Level (Applicants must already hold a TS clearance or higher)

Cipher Tech Solutions; Vienna (VA); On-site; USD 76,000 - 113,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

Cipher Tech Solutions in Vienna, VA seeks a Vulnerability Researcher to identify flaws in software and document findings with precision. You will work independently, applying the latest vulnerability research techniques and best practices while detailing research results comprehensively.

The role requires US citizenship, a TS-level security clearance, a STEM degree, and 3+ years of relevant experience. On-site work only; relocation assistance available.

Qualifications

• Must be a US citizen and hold TS level security clearance or higher at application time.
• Bachelor's or higher in a STEM field within 1 year of completion; preferred CS/EE/Math.
• Minimum 3 years post-graduation experience in relevant security research.
• Strong C, ASM and Python development experience; reverse engineering expertise.
• Experience with dynamic and static binary analysis and fuzzing; debugger proficiency.
• Experience auditing code for security vulnerabilities and self-driven research.

Responsibilities

• Independently identify flaws in software and document findings with meticulous accuracy.
• Follow best practices in vulnerability research and report results clearly.
• Demonstrate ability to drive research tasks and learn complex systems.

Skills

C

ASM

Python

Reverse engineering

Dynamic analysis

Static analysis

Documentation

Self-driven research

Education

US citizenship

4-year STEM degree

TS or higher security clearance (at application)

Tools

IDA

Ghidra

Binary Ninja

GDB

ADB

Job description

Location

Vienna, VA

Description

The candidate will be working independently as a Vulnerability Researcher to identify flaws in software. The candidate must be familiar with the latest techniques in vulnerability research and demonstrate their ability to follow best practices. Individual must be extremely detail oriented when documenting their research.

Requirements

• MUST be a US citizen
• Must hold a US government security clearance at the TS Level or higher at time of application
• Must hold a 4-year STEM degree or be within one year of completion. Our preferred majors are: Computer Science, Electrical/Computer Engineering, and Math.
• Must have 3 years of post graduation experience relevant to this position.
• Strong C, ASM, and Python development experience
• Reverse engineering utilizing any of IDA, Ghidra, or Binary Ninja
• Experience with dynamic and static binary analysis & fuzzing techniques
• Extensive experience with debuggers (GDB, ADB, etc.)
• Experience auditing code for security vulnerabilities.
• Demonstrated ability to self-drive research tasking
• Motivated to learn complex systems

Desired Skills

• Performing full system emulation for research and analysis
• Understanding of network protocols
• Experience reading and writing assembly (ARM, x86/x64)
• Understanding of OS Internals (any major OS)

Remote work is not an option. We do offer relocation assistance. Please see our careers page or inquire with your recruiter about the terms and conditions.

Salary and other Compensation

The hourly wage range is: $55.28 - $81.73

The salary range for this position is subject not only to the hire's skills, education, expertise, and years of experience, but also to features of the final position offered to the hire: including, but not limited to the location of the position, clearance required for the position, and the contract associated with the position. See our Perks & Benefits page for a general description of benefits and other potential compensation benefits: https://www.ciphertechsolutions.com/careers/perks-benefits/

About Us

At Cipher Tech Solutions, Inc. (Cipher Tech), we take great pride in supporting some of the most mission critical work in the Department of Defense and the Intelligence Community. The majority of our company is comprised of extremely talented software developers who write production tools which directly support one of two missions: digital forensics and malware reverse engineering.

Digital forensics is the practice of extracting and processing evidence from computers, phones, tablets, cameras, flash-drives, and just about any other form of digital media. The results of our work are then used to support federal and military law enforcement, counterintelligence, and counter terrorist activities.

Malware reverse engineering is the practice of analyzing malicious code. The goal of a reverse engineer is to understand how the malicious code works and determine facts such as: * How did it infect the victim's computer * What kind of information it is seeking to steal * How is it communicating with the author (actor) * Who that actor might be.

Vaccination Notice

Please be aware that you are applying for a position to work as a federal contractor. As such, Cipher Tech will require, and your employment will be subject to, such vaccinations as are required by federal, state, and local law requirements.

Important Security Clearance Information

Be aware that you are applying for a job that requires you already hold a U.S. government security clearance at time of application.

The U.S. government will not issue security clearances to recent users of illegal drugs. On your application to us, you must acknowledge that you have not engaged in any illegal drug use within the past twelve months (illegal drug use includes, but is not limited to, the use of illegal substances, the misuse of prescriptions, the misuse of over-the-counter substances, and the use of medical or recreational marijuana (or its derivatives) that may be deemed legal at the state level but is still considered illegal by the federal government). NOTE: CIPHER TECH WILL NOT DISCRIMINATE AGAINST ANY QUALIFIED APPLICANTS WITH A DISABILITY OR A RECORD OF A DISABILITY, INCLUDING ILLEGAL DRUG USERS WHO HAVE RECENTLY SOUGHT PROFESSIONAL TREATMENT FOR A DRUG PROBLEM.

Cipher Tech is an Equal Opportunity Employer. All hiring and employment decisions are made on the basis of business requirements, performance, and merit with no regard to race, color, religion, sexual orientation, gender, gender identity, national origin, or other protected status.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or national origin.