Windows Junior CNO Security Analyst & Reversing Engineer

Yellow Duck Technologies Inc.; Corridor North (MD); On-site; USD 150,000 - 210,000; Full time

Job summary

Yellow Duck Technologies is seeking a Windows CNO Developer & Analyst with expertise in low-level software analysis, reverse engineering, and exploit development. The candidate will design and write code in C++ and Python, read assembly, and use debuggers like WinDbg within an Agile security team.

The role requires deep knowledge of Windows internals, OS security, network protocols, sockets, and exploitation mitigations.

Qualifications

• Must have TS/SCI clearance with Full Scope Polygraph.
• Bachelor's degree or 4 years of relevant experience in lieu of degree.
• Minimum 4 years of experience in software security research and reverse engineering.
• Strong programming skills in C++ and Python.
• Proficiency in reading and writing assembly.
• Experience with debugging tools.
• Hands-on experience with reverse engineering tools.
• In-depth knowledge of Windows internals, OS security, network protocols, and sockets.
• Understanding of common CNO techniques and exploitation mitigations.
• Familiarity with Scrum/Kanban methodologies.
• Experience with version control systems.
• Knowledge of basic configuration management principles.

Responsibilities

• Identify vulnerabilities and develop innovative security solutions within an Agile security team.
• Analyze Windows internals and OS security mechanisms to support defense and exploitation mitigation.
• Collaborate with security researchers to research threats and craft protections.

Skills

Reverse engineering

C++

Python

Windows internals

Networking protocols

OS security

Agile/Scrum Kanban

Debugging

Education

Bachelor's degree or equivalent experience

Tools

WinDbg

Version control

Job description

Yellow Duck Technologies is seeking a Windows CNO Developer & Analyst with expertise in low-level software analysis, reverse engineering, and exploit development. The candidate will design and write code in C++ and Python, read assembly, and use debuggers like WinDbg within an Agile security team.

The role requires deep knowledge of Windows internals, OS security, network protocols, sockets, and exploitation mitigations.