Vulnerability Researcher/Reverse Engineer

Gormat; Corridor North (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Gormat seeks an exceptionally talented Vulnerability Researcher/Reverse Engineer to conduct advanced vulnerability research and reverse engineering on target software and hardware systems for cyberspace capability development.

You will perform technical analysis, reverse engineering, fuzzing, and exploit prototyping to identify exploitable weaknesses. This role demands deep expertise and offers challenging operational work across platforms.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related technical field
• 10+ years of related professional experience; Master's degree and 8+ years of related professional experience
• Proficiency with disassemblers/decompilers (IDA Pro, Ghidra, and/or Binary Ninja)
• Strong understanding of x86/x64/ARM assembly language and processor architectures
• Practical experience with debuggers (WinDbg, GDB, and/or LLDB) and dynamic analysis tools
• Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust applications)
• Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions)
• Proficiency with fuzzing frameworks (AFL, libFuzzer, Honggfuzz) and corpus management
• Strong scripting skills for automation and analysis;Experience documenting technical research for both technical and operational audiences
• TS/SCI with polygraph is required

Responsibilities

• Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
• Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
• Perform vulnerability discovery through automated fuzzing, manual code review, and dynamic/static analysis techniques.
• Rapidly prototype proof-of-concept exploits to validate vulnerability findings and assess operational utility.
• Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
• Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.
• Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.
• Collaborate with capability development teams to translate vulnerability research into operational tools.
• Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
• Apply offensive cyber domain expertise, including red/purple team operations, to develop and deliver mission-critical solutions.
• Conduct limited TDY travel as mission requires.

Skills

Reverse engineering

Vulnerability research

Disassembly & analysis

x86/x64/ARM assembly

Dynamic analysis

Scripting (Python, Ruby)

Documentation for technical audiences

Prototyping PoC exploits

Education

Bachelor's degree in CS/CE/EE or related field

Master's degree (preferred)

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

LLDB

AFL

libFuzzer

Honggfuzz

Job description

Gormat is looking for an amazingly talented Vulnerability Researcher/Reverse Engineer to join our team! In this role you will get to conduct advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development.

What You'll Be Doing:

• Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
• Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
• Perform vulnerability discovery through automated fuzzing, manual code review, and dynamic/static analysis techniques.
• Rapidly prototype proof-of-concept exploits to validate vulnerability findings and assess operational utility.
• Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
• Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.
• Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.
• Collaborate with capability development teams to translate vulnerability research into operational tools.
• Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
• Apply offensive cyber domain expertise, including red/purple team operations, to develop and deliver mission-critical solutions.
• Conduct limited TDY travel as mission requires.

What Required Skills You'll Bring:

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related technical field
• 10+ years of related professional experience; Master's degree and 8+ years of related professional experience
• Proficiency with disassemblers/decompilers (IDA Pro, Ghidra, and/or Binary Ninja)
• Strong understanding of x86/x64/ARM assembly language and processor architectures
• Practical experience with debuggers (WinDbg, GDB, and/or LLDB) and dynamic analysis tools
• Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust applications)
• Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions)
• Proficiency with fuzzing frameworks (AFL, libFuzzer, Honggfuzz) and corpus management
• Strong scripting skills (Python, Ruby, or similar) for automation and analysisExperience documenting technical research for both technical and operational audiences

What Desired Skills You'll Bring:

• USCC JQR qualified Joint Qualification Record
• Experience with Windows kernel/driver reverse engineering
• Firmware analysis and embedded systems reverse engineering
• Network protocol analysis and vulnerability research
• Experience with UEFI/BIOS or bootloader security analysis
• Published vulnerability research (CVEs, conference presentations, blog posts)
• Familiarity with symbolic execution and taint analysis tools
• Understanding of offensive cyberspace operations workflows
• Prior experience in offensive cyber operations, red/purple team activities, or equivalent work from a contract/civilian position

TS/SCI with polygraph is required.