Vulnerability Research and Exploit Developer

About the role

As a Vulnerability Research and Exploit Developer (VRED) at CACI, you will support DoD and IA/IC requirements by analyzing and exploiting mobile and network devices. You will identify and exploit security weaknesses in complex systems while collaborating with interagency partners within an interagency facility. This role integrates closely with Joint Cyber Operations Group (JCOG) personnel to ensure non-disruptive mission execution. Strong analytical and problem-solving skills, excellent written and verbal communication, and the ability to thrive in a fast-paced environment are essential. The successful candidate will attain and maintain a Top Secret/SCI (TS/SCI) clearance with a polygraph.

Responsibilities

• Conduct in-depth vulnerability research and exploit development for mobile and network devices.
• Identify and analyze security weaknesses in complex systems, providing actionable insights and solutions.
• Apply artificial intelligence models and AI-assisted workflows to accelerate vulnerability discovery and exploit development (e.g., LLM-assisted code analysis, reverse engineering, and triage).
• Collaborate with interagency partners and JCOG personnel to support mission objectives.
• Develop and maintain tools and scripts for automated vulnerability detection and exploitation.
• Ensure seamless integration of developed solutions into existing systems without disrupting ongoing operations.
• Provide technical guidance and support to team members, fostering a collaborative work environment.
• Maintain detailed documentation of research findings, exploit development processes, and solution implementations.
• Stay current with cybersecurity, vulnerability research, and exploit development trends.

Qualifications

• Current Top Secret/SCI (TS/SCI) security clearance with polygraph.
• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, with a minimum of five years of relevant experience; or equivalent combination of education and experience.
• Proven track record of identifying and exploiting security weaknesses in mobile and network devices.
• Strong proficiency in programming languages such as C/C++, Python, and assembly (ARM/x86).
• Experience with exploit development techniques, reverse engineering, and vulnerability assessment tools and frameworks (e.g., IDA Pro, Ghidra, Binary Ninja, Frida, GDB/LLDB, QEMU).
• Excellent written and verbal communication skills.
• Ability to work independently with minimal oversight and function effectively within a team.
• Desired: Master’s degree in a related field.
• Desired: Certifications such as OSCP, OSED/OSEE, GXPN, and GREM.
• Desired: Experience building fuzzing harnesses (e.g., AFL++, libFuzzer, honggfuzz) and triaging crashes to root cause.
• Desired: Deep understanding of memory-corruption vulnerability classes and techniques for bypassing modern exploit mitigations (ASLR, DEP/NX, stack canaries, CFI/CFG, PAC, sandboxing).
• Desired: Proficiency in reverse engineering closed-source binaries and embedded firmware (static and dynamic analysis).
• Desired: Hands-on experience with iOS and/or Android internals—sandbox escape, kernel exploitation, baseband, and TrustZone/Secure Enclave.
• Desired: Demonstrated research output—published CVEs, Pwn2Own results, DEFCON/Black Hat talks, or competitive CTF placements.
• Desired: Experience with kernel-mode/low-level exploitation and OS internals (e.g., XNU, Linux, Windows), including drivers.
• Desired: Java/Kotlin for Android-focused vulnerability research; familiarity with Rust or similar memory-safe systems languages is a plus.

This position is contingent on funding and may not be filled immediately. Individuals who apply may also be considered for other positions at CACI.

Pay

The proposed salary range for this position is $94,400 – $198,200. Final salary may vary based on factors such as geographic location, Federal Government contract labor categories, relevant prior experience, specific skills, education, and certifications.