Vulnerability Researcher

2 days ago


Fulton MD, United States CISCO Systems Full time

Application window has been extended and expected to close on 12/12/2024. However, the job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.Cisco Talos Intelligence Group is one of the largest commercial threat intelligence teams in the world. Talos defends Cisco customers against known and emerging threats, discovers new vulnerabilities in common software, and interdicts threats in the wild before they can further harm the internet at large.What You'll DoIf you enjoy vulnerability research, crash analysis, reverse engineering, and researching new techniques and writing tools to automate these tasks, this job is for you. This Senior Researcher position with Cisco Talos Vulnerability Discovery and Research Team is available to remote and international workers.Security research including development of tools for vulnerability discovery, analysis, and mitigation. Development of fuzzers and static analysis tools to identify new vulnerabilities in software. Development of static and run-time analysis tools to figure out root cause and input conditions related to a vulnerability. Vulnerability triage and proof of concept exploit development to support the creation of detection content. Additional responsibilities include helping users and other analysts with setup, installation, and usage of the vulnerability research tools and demonstrating leadership in the security community through publishing open-source tools, papers, presentations, and blog posts.Who You ArePerform security analysis to discover new vulnerabilities in software and/or embedded systems.Create tools for the discovery and triage of vulnerabilities.Write detailed technical advisories on new vulnerabilities.Develop proof of concept exploits for testing IPS and IDS effectiveness.Perform patch analysis to find and trigger vulnerabilities.Reverse engineer binary applications, protocols, and formats.Analyze zero-day vulnerabilities and emerging security threats and technologies.Demonstrate leadership within the security community.Minimum Qualifications3+ years of experience in vulnerability research or a closely related area, e.g. exploit, fuzzing or mitigation developmentBachelor’s degree or equivalent in Computer Science, Electrical Engineering, Cyber Security, or other tech-related degree (or equivalent due to work experience)Preferred Qualifications5+ years’ experience with vulnerability research3+ years’ experience with binary auditing and reverse engineering, and with related tools such as IDA Pro, Binary Ninja, Ghidra, etc. and with plugin development.3+ years’ experience with C/C++, and a scripting language (e.g., Python), and assembly (e.g., x86/x64, ARM, etc.)3+ years’ experience with common vulnerabilities and methods of exploitation, such as memory corruption, web application exploitation, file format vulnerabilities, protocol-based weaknesses, etc.Published technical contributions to the security community (e.g. CVEs, security advisories, blog posts (0-day/n-day analysis), open source contributions, academic publications, etc.)Candidates with experience in vulnerability research in industrial control systems are encouraged to applyKnowledge of common file format and network protocol structures.Ability to work independently with minimum supervision and to tackle additional tasks as the need arises.Why Cisco SecureWe're global, we're adaptable, we're diverse, and our security portfolio is as extensive as it is groundbreaking. Have you heard of Threat, Detection & Response, Zero Trust by Duo, Common Services Engineering, or Cloud & Network Security? Those are only a few of our product teams The only thing we're missing is YOU.Join an enterprise security leader with a start-up culture, committed to driving innovation and giving you the opportunity to make an impact. We #InnovateToWin and we know we're better together, that's why we're dedicated to inclusivity, collaboration, and diversity in everything we do.We're proud to be the Best Small and Mid-Size Enterprises Security Solution Cisco Secure continues to grow and evolve year after year with 100% of Fortune 100 Companies using our products, and we're excited to see the new heights we'll reach with your passion for security, your customer focus, and your desire to change things upThere are so many amazing reasons to join Cisco. Learn more hereLocation:Offsite, Fulton, Maryland, USArea of InterestSecurityCompensation Range126400 USD
- 222200 USDJob TypeProfessionalTechnology InterestSecurityJob Id1430882Message to applicants applying to work in the U.S. and/or Canada:When available, the salary range posted for this position reflects the projected hiring range for new hire, full-time salaries in U.S. and/or Canada locations, not including equity or benefits. For non-sales roles the hiring ranges reflect base salary only; employees are also eligible to receive annual bonuses. Hiring ranges for sales positions include base and incentive compensation target. Individual pay is determined by the candidate's hiring location and additional factors, including but not limited to skillset, experience, and relevant education, certifications, or training. Applicants may not be eligible for the full salary range based on their U.S. or Canada hiring location. The recruiter can share more details about compensation for the role in your location during the hiring process.U.S. employees have access to quality medical, dental and vision insurance, a 401(k) plan with a Cisco matching contribution, short and long-term disability coverage, basic life insurance and numerous wellbeing offerings. Employees receive up to twelve paid holidays per calendar year, which includes one floating holiday, plus a day off for their birthday. Employees accrue up to 20 days of Paid Time Off (PTO) each year and have access to paid time away to deal with critical or emergency issues without tapping into their PTO. We offer additional paid time to volunteer and give back to the community. Employees are also able to purchase company stock through our Employee Stock Purchase Program.Employees on sales plans earn performance-based incentive pay on top of their base salary, which is split between quota and non-quota components. For quota-based incentive pay, Cisco typically pays as follows:.75% of incentive target for each 1% of revenue attainment up to 50% of quota;1.5% of incentive target for each 1% of attainment between 50% and 75%;1% of incentive target for each 1% of attainment between 75% and 100%; and once performance exceeds 100% attainment, incentive rates are at or above 1% for each 1% of attainment with no cap on incentive compensation.For non-quota-based sales performance elements such as strategic sales objectives, Cisco may pay up to 125% of target. Cisco sales plans do not have a minimum threshold of performance for sales incentive compensation to be paid.



  • fulton, United States CISCO Systems Full time

    Application window is expected to close on 12/2/24Cisco Talos Intelligence Group is one of the largest commercial threat intelligence teams in the world. Talos defends Cisco customers against known and emerging threats, discovers new vulnerabilities in common software, and interdicts threats in the wild before they can further harm the internet at large.What...

  • Research Engineer

    1 week ago


    Fulton, United States Cisco Systems, Inc. Full time

    Application window is expected to close by 12/20/2024Who we are:The Talos Network Threat Detection and Response Team creates network and endpoint signatures that are distributed world-wide to multiple products in Cisco‘s security portfolio and the open- source community. Who you Are:In this position you will create detection content for vulnerabilities in...

  • Research Scientist

    2 weeks ago


    Fort Meade, MD, United States National Security Agency Full time

    Are you looking to apply your computer science and other technical expertise to develop technologies and tools and be a part of cutting edge innovations? Come join our team of experts! NSA is in search of Research Scientists and Senior Research Scientists to solve complex problems, test innovative approaches and research new solutions to make the U.S. and...


  • Fort Meade, MD, United States National Security Agency Full time

    NSA's Mathematics Research Group conducts world-class mathematical research with the objective of developing new and innovative techniques and technologies to support our Signals Intelligence and Cybersecurity missions, as well as the broader Intelligence Community (IC). We are actively seeking mathematicians to join our Mathematics Research Group. The Group...


  • Laurel, MD, United States Johns Hopkins Applied Physics Laboratory (APL) Full time

    Description Are you passionate about making impactful technical contributions to critical national security cyber challenges? Do you love researching the hardest cyber security problems and collaborating with outstanding software reverse engineers and developers to build jaw-dropping proof-of-concept capabilities? Do you have experience crafting exploits...


  • Fort George G Meade, MD, United States National Security Agency Full time

    We are looking for a skilled Research Scientist to be part of our team at the National Security Agency. As a key member, you will contribute to developing cutting-edge technologies and solutions that advance our nation's security interests.OverviewThe National Security Agency is the world's leading organization in computer science and technical innovation....


  • Fulton, United States Raytheon Technologies Full time

    Date Posted: 2024-09-04 Country: United States of America Location: MD440: 8170 Maple Lawn Blvd Fulton MD 8170 Maple Lawn Boulevard , Fulton, MD, 20759 USA Position Role Type: Onsite Collins Aerospace, an RTX company, is a leader in technologically advanced and intelligent solutions for the global aerospace and defense industry. Collins Aerospace has the...


  • Fulton, United States Raytheon Technologies Full time

    Date Posted: 2024-09-04 Country: United States of America Location: MD440: 8170 Maple Lawn Blvd Fulton MD 8170 Maple Lawn Boulevard , Fulton, MD, 20759 USA Position Role Type: Onsite Collins Aerospace, an RTX company, is a leader in technologically advanced and intelligent solutions for the global aerospace and defense industry. Collins Aerospace has the...


  • Annapolis, MD, United States NetSage Full time

    NetSage's mission is to help our customers achieve their missions by providing superior cyber services. We seek talented professionals who are interested in doing meaningful, mission-focused work for the US Federal Government. We are a growing Company that puts our employees first and offers excellent pay and world-class benefits. We do not hire contract by...

  • Network Analyst

    1 month ago


    Linthicum, MD, United States Links Technology Solutions Full time

    Links Technology Solutions is currently seeking an experienced Digital Network Analyst to fill an opening with an IT Services and IT Consulting company.Responsibilities of the Digital Network AnalystThis exciting role is part of a large team researching vulnerabilities of large-scale systems and developing assessments which are briefed to high level...


  • Fulton County, United States GeorgiaGov Full time

    POSITION SUMMARY : ESSENTIAL DUTIES and RESPONSIBILITIES : Responsible for day-to-day support of network and telecommunication related technologies Works priorities, projects and installs of network equipment and software that supports the layer 3 network. Facilitates limited workstation support to include advanced configuration of systems,...


  • Annapolis, MD, United States Booz Allen Hamilton Full time

    Your growth matters to us - explore our career development opportunities. A PLACE WHERE YOU BELONG Bring your whole self to work in our culture of respect and inclusivity. SUPPORT YOUR WELLBEING Learn how we’ll support you as you pursue a balanced, fulfilling life. YOUR CANDIDATE JOURNEY Discover what to expect during your journey as a candidate with us....

  • Cloud Architect

    3 days ago


    Bethesda, MD, United States Nexient LLC Full time

    Req ID: 301789 NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. We are currently seeking a Cloud Architect - AWS, Azure, GCP to join our team in Bethesda, Maryland (US-MD), United States (US). NTT DATA is...


  • Davidsonville, MD, United States Maximus Full time

    General information Job Posting Title Automation Security Engineer Date Monday, September 23, 2024 City Annapolis Junction State MD Country United States Working time Full-time Description & Requirements Maximus is seeking a proficient Automation Security Engineer to provide advanced expertise in securing automated systems for a federal client's critical...

  • Nurse Practitioner

    1 month ago


    Largo, MD, United States University of Maryland Faculty Physicians Full time

    The Section of Interventional Pulmonology within the Division of Pulmonology & Critical Care Medicine is seeking a self-motivated nurse practitioner to join our rapidly growing practice. Interventional pulmonology is a sub-specialty that uses minimally invasive techniques to diagnose and treat a variety of lung conditions. This innovative NP position will be...


  • Annapolis Junction, MD, United States Maximus Full time

    General information Job Posting Title Automation Security Engineer Date Monday, September 23, 2024 City Annapolis Junction State MD Country United States Working time Full-time Description & Requirements Maximus is seeking a proficient Automation Security Engineer to provide advanced expertise in securing automated systems for a federal client's...


  • Annapolis Junction, MD, United States Maximus Full time

    General information Job Posting Title Automation Security Engineer Date Monday, September 23, 2024 City Annapolis Junction State MD Country United States Working time Full-time Description & Requirements Maximus is seeking a proficient Automation Security Engineer to provide advanced expertise in securing automated systems for a federal client's critical...


  • Bethesda, MD, United States Maximus Full time

    General information Job Posting Title Senior Architectural Engineer - Secure Facility Date Friday, October 25, 2024 City Bethesda State MD Country United States Working time Full-time Description & Requirements Join an exciting and impactful team supporting national security priorities. This role will provide...


  • Annapolis Junction, MD, United States Maximus Full time

    General information ...


  • Annapolis Junction, MD, United States Maximus Full time

    General information Job Posting Title Automation Security Engineer Date Monday, September 23, 2024 City Annapolis Junction State MD Country United States Working time Full-time Description & Requirements Maximus is seeking a proficient Automation Security Engineer to provide advanced expertise in securing automated systems for a federal client's critical...