Vulnerability Researcher

Req #: 1970

Job Title: Vulnerability Researcher

Location: Fort Meade, MD

Clearance Level: TS/SCI with CI Poly

Summary

Agile Defense is looking for an amazingly talented Vulnerability Researcher to join our team! In this role you will get to support the United States Cyber Command (USCC), where you will have a significant impact on the mission.

What You'll Be Doing:

Conduct advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development.

Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.

Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.

Develop proof-of-concept exploits to validate vulnerability findings and assess operational utility.

Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.

Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.

Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.

Collaborate with capability development teams to translate vulnerability research into operational tools.

Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.

Conduct limited TDY travel as mission requires.

What Required Skills You'll Bring:

Bachelor’s degree in related technical field and 10+ years of related professional experience; Master's degree and 8+ years.

Expert proficiency with disassemblers/decompilers (IDA Pro, Ghidra, Binary Ninja)

Strong understanding of x86/x64/ARM assembly language and processor architectures

Practical experience with debuggers (WinDbg, GDB, LLDB) and dynamic analysis tools

Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust applications)

Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions)

Proficiency with fuzzing frameworks such as AFL, libFuzzer, Honggfuzz and corpus management

Strong scripting skills (Python, Ruby, or similar) for automation and analysis

Experience documenting technical research for both technical and operational audiences

Active TS/SCI with Poly

What Desired Skills You'll Bring:

Experience with Windows kernel/driver reverse engineering

Firmware analysis and embedded systems reverse engineering

Network protocol analysis and vulnerability research

Experience with UEFI/BIOS or bootloader security analysis

Published vulnerability research (CVEs, conference presentations, blog posts)

Familiarity with symbolic execution and taint analysis tools

Understanding of offensive cyberspace operations workflows

• Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
• Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
• Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
• Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
• Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
• Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.