Senior Vulnerability Research Engineer
Vulnerability Researcher
Use advanced systems to find zero-day (O-day) vulnerabilities. Responsible for analyzing, designing, and identifying programmatic behaviors. Have an opportunity to develop, test, and debug software applications. Research data and provide new design ideas for vulnerability techniques. Understands terminologies like debugging and fuzzing and apply them into your work.
Required Skills
- Must have a current TS/SCI with CI polygraph security clearance. All candidates must be US citizens.
- Typically requires a Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field with 6 years of practical experience in a technology-related environment.
- A solid understanding of software development and knowledge in any of the following: C, C++, or Python.
- Experience with program analysis, reverse engineering, and debugging tools (e.g., angr, BAP, IDA Pro, Binary Ninja, gdb, Ghidra, windbg).
- Knowledge of Windows or Linux.
- Knowledge of Assembly (x86/x64).
Desired Skills
- Understanding of OS Internals (any major OS).
- Experience with exploit development, Hack The Box, etc…
- Experience reading or writing assembly.
- Understanding of network protocols, application layer, able to read/write socket code.
- Understanding of exploit mitigations such as DEP and ASLR.
Relevant Certifications
- Relevant Cybersecurity Certifications (e.g. oscp, oscE, OSWP, OSEP, OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP)
What We Offer
- Total rewards package including compensation, healthcare, wellness, retirement, and work/life benefits.
- Career development and recognition programs.
Schedule
This position is an onsite role.
Pay
The salary associated with this position ($77,000–$163,000) is commensurate with the selected candidate’s qualifications, years of relevant experience, and demonstrated level of expertise. Compensation will be determined based on these factors to ensure alignment with skills, responsibilities, and market standards.
Benefits
- Medical, vision and dental insurance coverage.
- 401k plan.
- PTO.
- Holidays.
- Additional insurances.
About the Role
Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.
Skills
- Technical expertise in cybersecurity and intelligence support services.
- Ability to analyze and identify programmatic behaviors.
- Experience with various programming languages and tools.
- Knowledge of operating systems and network protocols.
- Understanding of exploit development and mitigation strategies.
Benefits
- Comprehensive health, vision, and dental insurance.
- 401(k) retirement plan.
- Flexible vacation and holiday time.
- Additional insurance options.
Qualifications
- Current TS/SCI with CI polygraph security clearance.
- US citizenship.
- Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field.
- At least 6 years of practical experience in a technology-related environment.
- Strong understanding of software development and knowledge in C, C++, or Python.
- Experience with program analysis, reverse engineering, and debugging tools.
- Knowledge of Windows or Linux operating systems.
- Experience with Assembly (x86/x64).
- Understanding of OS internals (any major OS).
- Experience with exploit development and related tools.
- Understanding of network protocols and application layer.
- Experience with exploit mitigations such as DEP and ASLR.
- Relevant cybersecurity certifications (e.g. oscp, oscE, OSWP, OSEP, OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP).