Windows CNO Developer - TS/SCI Kernel & Reverse Engineering

Legato, LLC; Virginia (MN); On-site; USD 140,000 - 200,000; Full time

Job summary

Legato, LLC in Dulles, VA seeks a CNO Developer with TS/SCI clearance to design and reverse engineer Windows kernel components. You will analyze binaries, develop kernel-mode drivers, and contribute to threat research. Strong C/C++ skills and malware understanding are essential.

Join a team delivering advanced research and security-focused software for national security programs. Remote work not described; on-site expectations apply at the Dulles facility.

Qualifications

• Active TS/SCI clearance.
• 3+ years of CNO development experience with Windows.
• Bachelor’s or Master’s degree in CS/CE or related field.
• Proficient in C/C++ for systems-level programming.
• Experience with reverse engineering tools like IDA Pro, Ghidra, x64dbg, WinDbg, Hex-Rays.
• In-depth understanding of Windows internals (kernel-mode drivers, memory management, system calls, PE format).
• Experience with kernel-mode debugging and root cause analysis.
• Familiarity with secure coding practices and low-level exploit mitigation techniques (PatchGuard, CFG, DEP/ASLR).
• Strong understanding of malware behavior and techniques

Responsibilities

• Design, develop, and maintain low-level kernel-mode components, drivers, and subsystems for Windows.
• Perform reverse engineering of Windows binaries to understand system behavior and exploits.
• Conduct vulnerability research and proof-of-concept exploit development.
• Analyze crash dumps and provide kernel-level debugging and troubleshooting support.
• Collaborate with cybersecurity researchers, analysts, and software engineers to support security-focused development.
• Document findings, architecture, and procedures clearly for internal teams or external clients.

Skills

CNO development

Windows kernel development

Reverse engineering

C/C++ programming

Kernel debugging

Malware analysis

Education

Bachelor’s or Master’s degree in CS/CE or related field

Tools

IDA Pro

Ghidra

x64dbg

WinDbg

Hex-Rays

Job description

Legato, LLC in Dulles, VA seeks a CNO Developer with TS/SCI clearance to design and reverse engineer Windows kernel components. You will analyze binaries, develop kernel-mode drivers, and contribute to threat research. Strong C/C++ skills and malware understanding are essential.

Join a team delivering advanced research and security-focused software for national security programs. Remote work not described; on-site expectations apply at the Dulles facility.