76 vulnerability engineer jobs at 35 companies in Winchester, VA
1d
Save
Mark Applied
Hide
1d
Vulnerability Researcher
Herndon, Virginia, United States
$150k-$300k/yrOnsiteFull Time
Redhorse: Delivering data insights and technology solutions to government agencies.
7+ YOEActive TS/SCI clearance and 7+ years vulnerability research, reverse engineering, exploit development, programming (C,C++,Java,JavaScript), and mobile malware analysis for iOS/Android.
C, C++, Java, JavaScript, IDA Pro, OllyDbg, Windbg, Windows, Linux/Unix
ManTech: Provides technology solutions for defense and intelligence agencies.
8+ YOE8+ years vulnerability research or 10+ years with HS diploma; experience reverse engineering, low-level Windows/Linux internals, C/C++, Python, assembly, and security research tools; active Secret clearance required.
REDLattice: Provides advanced cybersecurity software and vulnerability research services.
3+ YOE3+ years vulnerability research or reverse engineering experience; strong Android and low-level systems knowledge; proficiency in C/C++, Python; experience with IDA Pro/Ghidra/Frida; bachelor’s in CS or CE (or equivalent); TS/SCI eligibility.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
Bachelor's in engineering/CS, knowledge of system vulnerabilities and remediation, experience with web protocols and threat modeling, coding/scripting experience, penetration testing knowledge.
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
12+ YOE12+ years civil/industrial engineering experience, TS/SCI clearance, Master’s degree in engineering, ability to produce detailed all-source technical assessments and perform facility vulnerability analyses.
Nightwing: Provides advanced cyber and intelligence solutions for national security.
5+ YOETS/SCI with polygraph, 5+ years C/C++ on Unix/Linux, Android/iOS mobile development, mobile vulnerability assessment, reverse engineering, degree in a technical discipline.
Changeis: Provides systems engineering and infrastructure solutions to ensure resilient, secure, and modern client IT environments.
Design and maintain resilient infrastructure (Linux, Windows, Cisco IOS, cloud), implement HA/DR and failover, lead containerization (Kubernetes/OpenShift/Docker), ensure security compliance and vulnerability remediation, and support DR exercises and system testing.
Chenega Corporation: Provides professional government, defense, and facility support services.
5+ YOEBachelor's degree or HS plus 5+ years in software development, configuration control, testing, security, automation, or cloud orchestration; active TS/SCI with CI poly, valid state operator's license, DevSecOps toolchain experience, and ability to perform vulnerability analysis.
SAICNYSE: SAIC: Provides engineering, IT, and mission support services to government.
10+ YOEMust hold TS/SCI with polygraph; expertise in RF communications, IP networking (TCP/IP, UDP, Ethernet, MPLS), information security, vulnerability assessments, and configuring/troubleshooting routers, switches, firewalls, and satellite modem equipment. 10+ years experience with a degree (15+ without).
TCP/IP, UDP, Ethernet, MPLS, routers, switches, firewalls, satellite modem equipment, spectrum analyzers, network analyzers, power meters, environmental test chambers, EMI/EMC
WorkdayNASDAQ: WDAY: Provides cloud-based software for financial and human capital management.
8+ YOE8+ years in incident response, intelligence, vulnerability assessment, security engineering or operations; experience with AI-based offensive tools; proficiency in Python/Java/Kotlin/Scala/JavaScript; threat hunting, detection development, and incident response skills.
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
12+ YOE12+ years civil/industrial engineering experience, active TS/SCI clearance, ability to produce all-source technical assessments and facility vulnerability analyses, DoD/IC knowledge, master's degree in engineering preferred.
AnaVation: Providing technical engineering and cybersecurity solutions for federal agencies.
7+ YOE7+ years in vulnerability research, reverse engineering, and security; experience with IDA Pro, Ghidra, Binary Ninja, Frida; Python and low-level languages; TS/SCI clearance.
IDA Pro, Ghidra, Binary Ninja, Frida, Python, C, C++, Rust, Assembly, ELF, PE
Senior Program Protection and Policy Compliance Systems Engineer
Chantilly, Virginia, United States
OnsiteFull Time
SAICNASDAQ: SAIC: Provides government and defense clients with technology and engineering services.
7+ YOEActive TS/SCI with CI Polygraph; Bachelor's +9 yrs or Master's +7 yrs relevant experience; experience developing program protection plans, threat/vulnerability assessments, mitigation strategies, and working independently with limited government direction.
IBMNew York Stock Exchange: IBM: Global technology providing enterprise software, cloud, and consulting.
4+ YOEBachelor's degree required; ~4+ years security or related engineering experience; experience with incident response, vulnerability remediation, cloud and IaC, scripting and automation; strong communication and problem-solving; must be authorized to work without visa sponsorship.
Peraton: Provides advanced technology and mission support for government agencies.
10+ YOELead security engineering for complex information systems, support RMF A&A, DISA STIG compliance, SIEM log analysis, vulnerability assessment, and work in SCIF with TS/SCI clearance.
Splunk, ACAS, DISA STIGs, STIG Viewer, Xacta, AWS, Google Cloud, Cloudtrail, Cloudwatch, Openshift, Antible, Linux
CACINYSE: CACI: Provides information technology and professional services to government clients.
7+ YOEBachelor's degree plus 7+ years experience; experience with red team/incident response, vulnerability assessment, Linux, Splunk; GPEN/GWAPT/OSCP/OSWA preferred; programming in Python/JavaScript/Go/.NET desired.
NVRNYSE: NVR: Constructs residential properties and provides mortgage and settlement services.
5+ YOE5+ years designing, implementing, and operating enterprise security tools; experience with incident response, vulnerability management, cloud and Microsoft 365 security; strong documentation and communication skills.
VivSoft Technologies: Delivers cloud, DevSecOps, and AI solutions to federal agencies
Active U.S. Secret clearance, bachelor's in cybersecurity/CS/IT, experience with RMF/ATO/SSP/POA&M on DoD IL systems, hands-on SIEM/IDS/IPS/EDR and vulnerability tooling, and certifications such as CompTIA Security+, CISSP, or CISM.