Vulnerability Researcher: Zero-Day Discovery & Exploits

Gormat; Maryland; On-site; USD 180,000 - 240,000; Full time

Job summary

Gormat is seeking an amazingly talented Vulnerability Researcher to join our team and support the United States Cyber Command, where you will have a significant impact on mission success. You will conduct advanced vulnerability research, reverse engineering, and PoC exploit development across software, firmware, and hardware.

You will analyze architectures, document findings for technical and operational audiences, and collaborate with capability development teams to translate research into

Qualifications

• Active TS/SCI with Poly.
• Bachelor's degree in a related technical field and 10+ years of experience; master's degree with 8+ years.
• Expert proficiency with disassemblers/decompilers (IDA Pro, Ghidra, Binary Ninja).
• Strong understanding of x86/x64/ARM assembly language and processor architectures.
• Practical experience with debuggers (WinDbg, GDB, LLDB) and dynamic analysis tools.
• Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust).
• Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions).
• Proficiency with fuzzing frameworks such as AFL, libFuzzer, Honggfuzz and corpus management.
• Strong scripting skills (Python, Ruby, or similar) for automation and analysis.
• Experience documenting technical research for both technical and operational audiences.

Responsibilities

• Conduct advanced vulnerability research and reverse engineering on target software/hardware.
• Perform technical analysis to identify zero-day vulnerabilities via fuzzing and code analysis.
• Reverse engineer software, firmware, and hardware components using disassemblers and debuggers.
• Develop PoCs to validate vulnerability findings and assess operational utility.
• Analyze target architectures, protocols, and security mechanisms to identify weaknesses.
• Document vulnerability details, exploitation methodology, and recommended approaches.
• Provide technical briefs to capability developers on vulnerabilities and exploitation pathways.
• Collaborate with capability teams to translate research into operational tools.
• Maintain awareness of public vulnerability disclosures and exploit techniques.
• Conduct limited TDY travel as required.

Skills

Clearance TS/SCI

Scripting (Python/Ruby)

Reverse engineering

Vulnerability research

Disassembly tools

C/C++/Rust

Debuggers (WinDbg/GDB/LLDB)

Fuzzing

Binary analysis

Education

Bachelor's degree in related technical field

Master's degree in related field

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

LLDB

Job description

Gormat is seeking an amazingly talented Vulnerability Researcher to join our team and support the United States Cyber Command, where you will have a significant impact on mission success. You will conduct advanced vulnerability research, reverse engineering, and PoC exploit development across software, firmware, and hardware.

You will analyze architectures, document findings for technical and operational audiences, and collaborate with capability development teams to translate research into