Vulnerability Researcher

Found in: Talent US A C2 - 7 days ago

Herndon, United States Chameleon Consulting Group Full time

 

Company Overview
CCG is a technology company focused on equipping customers with the capabilities and support to conduct intelligent and successful cyber operations. We do this by finding the most talented engineers and operators in the country, give them some of the most challenging problems facing the US government, and help them unleash their creativity and problem-solving skills. Excellence is our standard and mission success is our metric. 

Role

 

As a member of the Security Research team, you will imagine weaknesses in multiple types of systems and then find, demonstrate/document, and exploit those weaknesses. You will be joining a team of mature and extremely competent Security Researchers to breakdown and fully understand how a host of different systems function. You will need to leverage extensive experience performing static and dynamic analysis and must be familiar with multiple classes of vulnerabilities. Additionally, you must be extremely comfortable communicating with team members, technical partners, and non-technical partners alike. The ideal candidate will be comfortable and confident operating at the early phases of a vulnerability research project and have the mettle to see the project through to multiple phases and iterations. 

 

Responsibilities

 

  • Perform vulnerability research and reverse engineering for customer tasks 
  • Perform static and dynamic analysis by applying research tools such as disassemblers, debuggers, and fuzzers
  • Perform exploit development which leverage discovered vulnerabilities 
  • Be able to communicate security research findings internally and, when and where it is appropriate, externally

 

Minimum Qualifications

 

  • Must possess TS clearance
  • Bachelors degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline. Degree requirement can be met with four years of hands on experience in a software engineer or similar full time position
  • 2+ year(s) of experience in software vulnerability research
  • Experience with Ghidra, Binary Ninja, IDA or other reverse engineering/disassembler tools
  • Experience working in Linux fundamentals (strong grasp of sockets, file descriptors, networking, iptables, file systems, kernel, etc.)
  • Ability to read and write C and assembly languages as needed (ARM, MIPS, x86_64) with minimal oversight or supervision
  • Strong programming fundamentals; particularly with networking, data structures, and data models
  • Understanding of exploitation techniques such as leveraging arbitrary read-write primitives, shellcoding, and return-oriented programming / jump-oriented programming

 

Preferred Experience

 

  • OS and kernel reverse engineering 
  • Understanding of fuzzers such as AFL++ or libfuzzer
  • Understanding of common exploit mitigation mechanisms such as SELinux, Seccomp, ASLR, and CFI.
  • Understanding of dynamic analysis with gdb/gdbserver and similar tools
  • Basic understanding of compiler tool chains
  • Understanding of emulation using Qemu or Unicorn for running code in a non-native environment
  • Experience identifying 0-days and vulnerabilities
  • Develop high quality and reliable code (C, Assembly, Python, and/or JavaScript)

  • Mobile Systems Security Researcher

    Found in: Talent US A C2 - 7 days ago

    Herndon, United States Two Six Technologies Full time

    Overview of OpportunityTwo Six Technologies is seeking a Mobile Systems Security Researcher to support our growing team. The candidate will join a team of vulnerability researchers, reverse engineers, and exploit developers to perform advanced security research on applications and operating systems on mobile devices. Ideal candidates will understand the...

  • Senior Cybersecurity Researcher

    Found in: Talent US A C2 - 2 weeks ago

    Herndon, United States Two Six Technologies Full time

    Overview of Opportunity:Two Six Technologies is seeking aSenior Firmware Reverse Engineer for our team in Herndon, Virginia. You will expand your reverse engineering and exploit development skills and transition those findings into capabilities supporting national security missions.Job Responsibilities & DutiesCollaborate with team to align capability...

  • Cyber Security Systems Engineer with Security Clearance

    Found in: Dice One Red US C2 - 7 days ago

    Herndon, United States SilverEdge Full time

    Overview The Cyber Security Systems Engineer will execute vulnerability assessment tools and SOPs and provide recommendations to Management to enhance security capabilities. Responsibilities * Experience with vulnerability assessment tools. * Experience writing security documentation. * Provide enhancement capabilities and SOPs. * Maintain accountability. *...

  • ISSE with Security Clearance

    Found in: Dice One Red US C2 - 1 week ago

    Herndon, United States Knowledge Systems, LLC Full time

    • Defines information security requirements and their integration into information systems and its technology component through purposeful security design.• Develops and implements security designs ensure that the hardware, operating systems and software applications adequately address cyber security requirements and Security Controls Traceability Matrix...

  • Technical Targeting Officer with Security Clearance

    Found in: Dice One Red US C2 - 7 days ago

    Herndon, United States Valiant Integrated Services Full time

    Valiant is seeking Technical Targeting Officers to support our customer’s challenging operational requirements at multiple locations in the Washington Metropolitan Area. Successful candidates will support cutting-edge intelligence operations using specialized, state-of-the-art tools and technologies while working in an integrated government-contractor...

  • Information Assurance/Security Engineer IV

    7 days ago

    Herndon, United States DAn Solutions Inc Full time

    REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYGRAPH - NO REMOTE WORK, MUST WORK ONSITE •Defines information security requirements and their integration into information systems and its technology component through purposeful security design. •Develops and implements security designs ensure that the hardware, operating systems and software applications...

  • Information Assurance/Security Engineer IV

    Found in: Talent US A C2 - 2 weeks ago

    Herndon, United States DAn Solutions, Inc Full time

    REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYGRAPH - NO REMOTE WORK, MUST WORK ONSITE• Defines information security requirements and their integration into information systems and its technology component through purposeful security design.• Develops and implements security designs ensure that the hardware, operating systems and software applications...

  • Information Assurance/Security Engineer IV

    6 days ago

    Herndon, United States CareerBuilder Full time

    REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYGRAPH - NO REMOTE WORK, MUST WORK ONSITEDefines information security requirements and their integration into information systems and its technology component through purposeful security design.Develops and implements security designs ensure that the hardware, operating systems and software applications...

  • Cyber Security Systems Engineer with Security Clearance

    Found in: Careerbuilder One Red US C2 - 3 days ago

    Herndon, VA, United States SilverEdge Full time

    Overview The Cyber Security Systems Engineer will execute vulnerability assessment tools and SOPs and provide recommendations to Management to enhance security capabilitiesResponsibilities• Experience with vulnerability assessment tools.• Experience writing security documentation.• Provide enhancement capabilities and SOPs.• Maintain...

  • UI Developer

    6 days ago

    Herndon, United States KEMTechnology Full time

    Job DescriptionJob DescriptionSalary: Opportunity Description Summary:  UI DeveloperThe User Interface Developer will be asked to continually improve user interface and user experience for IC SCC tools and capabilities. Engineer, maintain, and fully support capabilities that enable cross-functional fusion analysis, reporting, data ingest, data mining,...

  • UI Developer

    7 days ago

    Herndon, United States KEMTechnology Full time

    Job DescriptionJob DescriptionSalary: Opportunity Description Summary:  UI DeveloperThe User Interface Developer will be asked to continually improve user interface and user experience for IC SCC tools and capabilities. Engineer, maintain, and fully support capabilities that enable cross-functional fusion analysis, reporting, data ingest, data mining,...

  • CI Officer with Security Clearance

    Found in: Dice One Red US C2 - 7 days ago

    Herndon, United States Valiant Integrated Services Full time

    Valiant is seeking Counterintelligence (CI) Officers to support our customer’s challenging operational requirements at multiple locations in the Washington Metropolitan Area. Successful CI Officer candidates will work in an integrated government-contractor team fusing intelligence information from multiple intelligence disciplines. Responsibilities include...

  • CI Officer with Security Clearance

    Found in: Dice One Red US C2 - 7 days ago

    Herndon, United States Valiant Integrated Services Full time

    Valiant is seeking Counterintelligence (CI) Officers to support our customer’s challenging operational requirements at multiple locations in the Washington Metropolitan Area for the METRO program. Successful CI Officer candidates will work in an integrated government-contractor team fusing intelligence information from multiple intelligence disciplines....

  • Security & Network Operation Analyst

    7 days ago

    Herndon, United States BSI Full time

    Great that you're thinking about a career with BSI! Job Title: Security & Network Operation Analyst Location: United States - Remote, Working to EST time zone About the role: Due to a huge period of growth within BSI, we are excited to be looking for a Security & Network Operations Analyst to join our Information Security Team. This position involves...

  • DevOps Engineer

    1 week ago

    Herndon, United States Allwyn Corporation Full time

    Job DescriptionJob DescriptionJob Title: DevOps Engineer Location: Vienna, VirginiaDescription:To research, evaluate, design, implement, and maintain CI/CD tooling and pipelines, and deliver Azure infrastructure for development teams. To provide technical direction and DevOps engineering support for projects and infrastructure. Automate and improve...

  • DevOps Engineer

    7 days ago

    Herndon, United States Allwyn Corporation Full time

    Job DescriptionJob DescriptionJob Title: DevOps Engineer Location: Vienna, VirginiaDescription:To research, evaluate, design, implement, and maintain CI/CD tooling and pipelines, and deliver Azure infrastructure for development teams. To provide technical direction and DevOps engineering support for projects and infrastructure. Automate and improve...

  • IT Manager

    6 days ago

    Herndon, United States CareerBuilder Full time

    Gridiron IT is seeking a Corporate IT Manager local to Herndon, VA to support a corporate company on a hybrid basis. Corporate IT manager job description We're seeking an experienced IT manager who has the technological skills to make us even more efficient. This person will analyze current systems and assets, recommend and implement solutions and upgrades,...

  • Cybersecurity Product Support Engineer

    Found in: Dice One Red US C2 - 7 days ago

    Herndon, United States LMI Government Consulting (Logistics Management Institute) Full time

    Overview LMI is currently seeking a Cybersecurity Product Support Engineer to support our customers in WMA. The ideal candidate will have had roles on several project teams which were focused in the areas listed in the Responsibilities section below. TS/SCI Clearance with polygraph is required. LMI is a Tech Services Company dedicated exclusively to...

  • Principal Firmware Reverse Engineer

    Found in: Talent US A C2 - 2 weeks ago

    Herndon, United States Two Six Technologies Full time

    Overview of OpportunityTwo Six Technologies is seeking a Principal Firmware Reverse Engineer for our team in Herndon, Virginia. You will work with a range of clients supporting national security missions. You will become a trusted advisor while learning and performing valuable technical and industry skills. You will expand your reverse engineering and...

  • Cybersecurity Product Support Engineer

    Found in: Talent US A C2 - 7 days ago

    Herndon, United States LMI Full time

    OverviewLMI is currently seeking a Cybersecurity Product Support Engineer to support our customers in WMA. The ideal candidate will have had roles on several project teams which were focused in the areas listed in the Responsibilities section below. TS/SCI Clearance with polygraph is required.LMI is a Tech Services Company dedicated exclusively to partnering...