Vulnerability Researcher: Mid-Level (Applicants must already hold a TS clearance or higher)
$114,982–$169,998 year
On-site · Vienna, Virginia, United States
Job Summary
Vulnerability Researcher (Mid-Level) to identify flaws in software for a DoD/IC-focused federal contractor. Role requires independent work identifying vulnerabilities, strong C/ASM/Python development, reverse engineering with IDA/Ghidra/Bin, dynamic/static binary analysis, fuzzing, extensive debugging, and code auditing. Must hold TS-level security clearance (or higher), be a US citizen with a 4-year STEM degree (or in final year), and have ~3 years of post-graduate relevant experience. Remote work is not available; relocation assistance is offered. Preferred skills include system emulation, network protocol understanding, assembly experience (ARM/x86), and OS internals knowledge. Vaccination requirements apply as part of federal contracting.
Required Qualifications
- Must be a US citizen
- Must hold a US government security clearance at the TS Level or higher at time of application
- Must hold a 4-year STEM degree or be within one year of completion
- Must have 3 years of post graduation experience relevant to this position
- Strong C, ASM, and Python development experience
- Reverse engineering utilizing IDA, Ghidra, or Binary Ninja
- Experience with dynamic and static binary analysis & fuzzing techniques
- Extensive experience with debuggers (GDB, ADB, etc.)
- Experience auditing code for security vulnerabilities
- Demonstrated ability to self-drive research tasking
- Motivated to learn complex systems
- Desired Skills: Performing full system emulation for research and analysis
- Understanding of network protocols
- Experience reading and writing assembly (ARM, x86/x64)
- Understanding of OS Internals (any major OS)
- Remote work is not an option
- We do offer relocation assistance
Additional Requirements
- Must be US citizen
- Must hold TS clearance at time of application
- Vaccination notice required for federal contractor role
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.