Windows CNO Developer (BZ)

Legato, LLC; Virginia (MN); On-site; USD 140,000 - 200,000; Full time

Job summary

Legato, LLC in Dulles, VA seeks a CNO Developer with TS/SCI clearance to design and reverse engineer Windows kernel components. You will analyze binaries, develop kernel-mode drivers, and contribute to threat research. Strong C/C++ skills and malware understanding are essential.

Join a team delivering advanced research and security-focused software for national security programs. Remote work not described; on-site expectations apply at the Dulles facility.

Qualifications

• Active TS/SCI clearance.
• 3+ years of CNO development experience with Windows.
• Bachelor’s or Master’s degree in CS/CE or related field.
• Proficient in C/C++ for systems-level programming.
• Experience with reverse engineering tools like IDA Pro, Ghidra, x64dbg, WinDbg, Hex-Rays.
• In-depth understanding of Windows internals (kernel-mode drivers, memory management, system calls, PE format).
• Experience with kernel-mode debugging and root cause analysis.
• Familiarity with secure coding practices and low-level exploit mitigation techniques (PatchGuard, CFG, DEP/ASLR).
• Strong understanding of malware behavior and techniques

Responsibilities

• Design, develop, and maintain low-level kernel-mode components, drivers, and subsystems for Windows.
• Perform reverse engineering of Windows binaries to understand system behavior and exploits.
• Conduct vulnerability research and proof-of-concept exploit development.
• Analyze crash dumps and provide kernel-level debugging and troubleshooting support.
• Collaborate with cybersecurity researchers, analysts, and software engineers to support security-focused development.
• Document findings, architecture, and procedures clearly for internal teams or external clients.

Skills

CNO development

Windows kernel development

Reverse engineering

C/C++ programming

Kernel debugging

Malware analysis

Education

Bachelor’s or Master’s degree in CS/CE or related field

Tools

IDA Pro

Ghidra

x64dbg

WinDbg

Hex-Rays

Job description

Legato, LLC recruiters ([e-mail]) would love to speak with you regarding the following position:Windows CNO DeveloperinDulles, VA.
Security Clearance Required: TS/SCI minimum

What You Will Do:

We are seeking a highly skilled CNO Developer with strong reverse engineering capabilities to support advanced research, systems development, and threat analysis. This role requires deep knowledge of the Windows operating system internals, low-level programming, and the ability to analyze and deconstruct binaries for vulnerabilities, malware, or undocumented system behavior. Design, develop, and maintain low-level kernel-mode components, drivers, and subsystems for Windows platforms.Perform reverse engineering of Windows binaries (both legitimate and malicious) to understand system behavior, exploits, or undocumented APIs.Conduct vulnerability research and proof-of-concept exploit development.Analyze crash dumps, root cause bugs, and provide kernel-level debugging and troubleshooting support.Collaborate with cybersecurity researchers, analysts, and software engineers to support security-focused development efforts.Document findings, architecture, and procedures clearly for internal teams or external clients.

Our minimum requirements for this role:

• Active TS/SCI clearance.
• 3+ years of CNO development experience with Windows.
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field (or equivalent experience).
• Previous experience in Windows kernel development.
• Proficient in C/C++ for systems-level programming.
• Expertise with reverse engineering tools such as IDA Pro, Ghidra, x64dbg, WinDbg, and Hex-Rays.
• In-depth understanding of Windows internals (e.g., kernel-mode drivers, memory management, system calls, PE file format).
• Experience with kernel-mode debugging and root cause analysis.
• Familiarity with secure coding practices and low-level exploit mitigation techniques (e.g., PatchGuard, CFG, DEP/ASLR).
• Strong understanding of malware behavior and techniques
  

About Your New Company

Legato, LLC is a dynamic small business headquartered in Columbia, near Ft. Meade, MD. Our positions include Cyber, Software, Systems, Networking, Data Science and other complex engineering capabilities. We set ourselves apart by having employees in the top of their field and who enjoy working at Legato for its attention to its employees, aggressive compensation, and upward mobility possibilities.

• We offer a generous benefits package including individual and family health, vision and dental benefits.
• A minimum of four (4) weeks of paid time off including a week of sick leave.
• Legato gives our employees 11 federal holidays off and a 401(k) employer match with no vesting schedule.
• There is an opportunity to earn referral benefits or bank hours if the contract allows.

Disclaimer: The salary range provided is an estimate based on current market conditions and may be adjusted based on factors such as experience, skills, and qualifications. The final salary offer will be determined after a thorough review of the candidate's background and alignment with the role. Please note that this range is subject to change and should be considered as a guideline rather than a definitive figure.

Legato LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, or disability status.