Vulnerability Researcher: Senior Levels (Applicants must already hold a TS clearance or higher) - FUTURE NEED

Cipher Tech Solutions; Vienna (VA); On-site; USD 60,000 - 149,000; Full time

Job summary

Cipher Tech Solutions, Vienna, VA, seeks a Vulnerability Researcher to identify flaws in software. You will work independently, applying the latest vulnerability research techniques and documenting findings with meticulous detail.

Requirements include US citizenship and a TS-level security clearance at time of application; a bachelor’s degree or higher in CS, ECE, Math or related field; 7+ years of professional experience; strong C, assembly and Python; reverse engineering with IDA, Ghidra or

Qualifications

• US citizenship and TS-level security clearance at time of application.
• Bachelor's degree or higher in CS, ECE, Math or closely related field.
• 7+ years of professional experience outside of academia.
• Strong C, ASM, and Python development experience.
• Reverse engineering using IDA, Ghidra, or Binary Ninja.
• Experience with dynamic and static binary analysis and fuzzing.
• Extensive experience with debuggers (GDB, ADB, etc.).
• Experience auditing code for security vulnerabilities.
• Self-driven research tasking and motivation to learn complex systems.

Responsibilities

• Identify flaws in software as a Vulnerability Researcher.
• Work independently applying advanced vulnerability research techniques.
• Document research findings with meticulous detail.

Skills

C programming

Assembly (ARM/x86)

Python

Reverse engineering

Dynamic analysis

Static analysis

Fuzzing

Debugging

Self-driven research

Motivated to learn

Education

Bachelor's degree or higher in Computer Science, Electrical/Computer Engineering, Math, or related field

Tools

IDA

Ghidra

Binary Ninja

GDB

ADB

Job description

Location: Vienna, VA

Description

The candidate will be working independently as a Vulnerability Researcher to identify flaws in software. The candidate must be familiar with the latest techniques in vulnerability research and demonstrate their ability to follow best practices. Individual must be extremely detail oriented when documenting their research.

Requirements

• MUST be a US citizen
• Must hold a US government security clearance at the TS Level or higher at time of application
• Must hold a Bachelor's degree or higher in Computer Science, Electrical/Computer Engineering, Math, or a closely related degree type
• Must have seven or more years professional experience, outside of a classroom setting.
• Strong C, ASM, and Python development experience
• Reverse engineering utilizing any of IDA, Ghidra, or Binary Ninja
• Experience with dynamic and static binary analysis & fuzzing techniques
• Extensive experience with debuggers (GDB, ADB, etc.)
• Experience auditing code for security vulnerabilities.
• Demonstrated ability to self-drive research tasking
• Motivated to learn complex systems

Desired Skills

• Performing full system emulation for research and analysis
• Understanding of network protocols
• Experience reading and writing assembly (ARM, x86/x64)
• Understanding of OS Internals (any major OS)

Remote work is not an option. We do offer relocation assistance.

Salary and other Compensation

The hourly wage range is: $43.27 - $108.17

The salary range for this position is subject not only to the hire's skills, education, expertise, and years of experience, but also to features of the final position offered to the hire: including, but not limited to the location of the position, clearance required for the position, and the contract associated with the position. See our Perks & Benefits page for a general description of benefits and other potential compensation benefits: https://www.ciphertechsolutions.com/careers/perks-benefits/

About Us

At Cipher Tech Solutions, Inc. (Cipher Tech), we take great pride in supporting some of the most mission critical work in the Department of Defense and the Intelligence Community. The majority of our company is comprised of extremely talented software developers who write production tools which directly support one of two missions: digital forensics and malware reverse engineering.

Digital forensics is the practice of extracting and processing evidence from computers, phones, tablets, cameras, flash-drives, and just about any other form of digital media. The results of our work are then used to support federal and military law enforcement, counterintelligence, and counter terrorist activities.

Malware reverse engineering is the practice of analyzing malicious code. The goal of a reverse engineer is to understand how the malicious code works and determine facts such as:

• How did it infect the victim's computer
• What kind of information it is seeking to steal
• How is it communicating with the author (actor)
• Who that actor might be.

Vaccination Notice

Please be aware that you are applying for a position to work as a federal contractor. As such, Cipher Tech will require, and your employment will be subject to, such vaccinations as are required by federal, state, and local law requirements.

Important Security Clearance Information

Be aware that you are applying for a job that requires you already hold a U.S. government security clearance at time of application.

The U.S. government will not issue security clearances to recent users of illegal drugs. On your application to us, you must acknowledge that you have not engaged in any illegal drug use within the past twelve months (illegal drug use includes, but is not limited to, the use of illegal substances, the misuse of prescriptions, the misuse of over-the-counter substances, and the use of medical or recreational marijuana (or its derivatives) that may be deemed legal at the state level but is still considered illegal by the federal government). NOTE: CIPHER TECH WILL NOT DISCRIMINATE AGAINST ANY QUALIFIED APPLICANTS WITH A DISABILITY OR A RECORD OF A DISABILITY, INCLUDING ILLEGAL DRUG USERS WHO HAVE RECENTLY SOUGHT PROFESSIONAL TREATMENT FOR A DRUG PROBLEM.

Cipher Tech is an Equal Opportunity Employer. All hiring and employment decisions are made on the basis of business requirements, performance, and merit with no regard to race, color, religion, sexual orientation, gender, gender identity, national origin or other protected status.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or national origin.