Vulnerability Research / Reverse Engineer, Principal

Accountabilities: Conduct advanced vulnerability research and reverse engineering across a diverse range of hardware and software targets to identify weaknesses and support the development of specialized cyber capabilities. Contribute to the research, design, and development of cyber tools that support complex operational requirements and broader mission objectives. Allocate and coordinate technical tasks to support large-scale cyber tool development, ensuring alignment with project priorities and technical requirements. Perform testing, validation, troubleshooting, and integration of cyber tools to ensure functionality, reliability, and compatibility across supported environments. Develop and maintain software in Windows and Linux environments, applying secure and efficient programming practices. Collaborate with technical specialists and mission stakeholders to address complex engineering challenges and deliver effective solutions. Apply established development workflows, including version control and continuous integration and delivery pipelines, to support consistent development and integration processes. Requirements A bachelor's degree in a relevant technical discipline and at least 10 years of related professional experience. A master's degree in a related field may substitute for up to four years of experience. At least 10 years of programming experience using languages such as Python, C, C++, and x86 assembly, along with a strong understanding of networking fundamentals. A minimum of five years of experience in vulnerability research, reverse engineering, and/or cyber tool development. Demonstrated experience developing and troubleshooting software in Windows and Linux environments. Practical knowledge of continuous integration and continuous delivery (CI/CD) pipelines and version control systems, particularly Git. Strong analytical, problem-solving, and technical communication skills, with the ability to work independently and collaborate effectively within a specialized team. U.S. citizenship and the ability to obtain a Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance. Preferred qualifications: Ten or more years of experience in vulnerability research and/or cyber tool development. Experience with cross-platform Windows and Linux development, Windows internals, and/or Linux kernel-level programming. Knowledge of concurrent application development, including multithreaded and distributed systems. Familiarity with antivirus evasion techniques and assembly languages such as x86, ARM, and MIPS. Experience working with additional operating systems, including Android, iOS, and macOS. Relevant certifications or specialized training, such as Corelan Bootcamp or Advanced, ManTech ACTP Windows/Linux/VR&E, OSCP, OSED, or OSWE. Experience supporting USCYBERCOM, NSA, Department of Defense cyber operations, or comparable national security mission environments. Willingness to work in a hybrid or on-site capacity at designated offices in Centreville, Chantilly, or Herndon, Virginia, to support access to classified environments. Benefits Competitive salary: Annual base salary ranging from $148,300 to $266,900 , depending on qualifications, experience, skills, and other relevant factors. Healthcare coverage: Medical, dental, and vision insurance. Retirement planning: Access to a 401(k) retirement savings plan. Paid time off: Paid leave to support vacation, personal needs, and time away from work. Life insurance: Coverage to help provide financial protection. Flexible work arrangements: Flexible work schedules, with remote opportunities and hybrid or on-site options for eligible candidates based on operational requirements. Paid holidays: Company-provided holidays to support work-life balance. Professional growth: Opportunities to develop advanced technical expertise and contribute to complex cybersecurity and national defense initiatives. Mission-driven environment: The opportunity to collaborate with highly specialized professionals on projects supporting critical government and national security objectives.