102 vulnerability researcher jobs at 46 companies in Washington, DC

2mo
Save
Mark Applied
Hide
Vulnerability Researcher
Annapolis Junction, Maryland, United States
OnsiteFull Time
Intelliforce
Intelliforce: Provides engineering and technical solutions for the intelligence community.
12+ YOETop Secret clearance with polygraph required; US citizen; degree and experience as listed; vulnerability research and reverse engineering experience.
IDA Pro, Ghidra, Radare, Binary Ninja, SysInternals, GDB, WinDBG, Python, C, C++, Assembly
2w
Save
Mark Applied
Hide
Vulnerability Researcher
Reston, Virginia, United States
$127k-$277k/yr OnsiteFull Time
Penn State University
Penn State University: Provides higher education and conducts extensive academic research programs.
3+ YOEExperience in reverse engineering and vulnerability research, proficiency with exploit development and testing tools, bachelor’s degree, TS/SCI clearance eligibility, strong technical communication.
Ghidra, IDA, Kali Linux, Angr, AFL++, QEMU, Unicorn, JIRA, Confluence
2w
Save
Mark Applied
Hide
CNO Vulnerability Researcher
Herndon or San Antonio or Hanover
$129k-$215k/yr OnsiteFull Time
ManTech
ManTech: Provides technology solutions for defense and intelligence agencies.
4+ YOEBachelor's plus 4+ years (or HS plus 8+ years), experience in vulnerability research, exploit development, reverse engineering; proficiency in C/C++, Python, Assembly; active Secret clearance.
C/C++, Python, Assembly (x86/x64), IDA Pro, WinDBG, Ghidra, Radare, Binary Ninja, SysInternals, GDB, JIRA, Confluence, Crucible
1w
Save
Mark Applied
Hide
Principal Vulnerability Researcher
Herndon, Virginia, United States
$181k-$289k/yr OnsiteFull Time
Two Six Technologies
Two Six Technologies: Develops cybersecurity and data systems for national security missions.
Lead vulnerability research on embedded systems; expert in C/C++ and Python, reverse engineering, firmware analysis, emulation, fuzzing, and mentoring junior staff. Active Top Secret clearance required or eligible.
C, C++, Python, Linux, IDA Pro, Binary Ninja, Ghidra, QEMU, JTAG, UART, oscilloscope, logic analyzer
1w
Save
Mark Applied
Hide
Lead Vulnerability Researcher
Maryland or Herndon
$175k-$220k/yr OnsiteFull Time
GrammaTech
GrammaTech: A cybersecurity delivering advanced security solutions and vulnerability research for government customers.
4+ YOEAdvanced degree and relevant cybersecurity experience required; proficiency in C/C++, Python, ISA, Linux, reverse engineering, decompilers, vulnerability research tools, and debuggers. Active TS/SCI clearance with polygraph required in Maryland.
C, C++, Python, x86, ARM, MIPS, Linux, IDA Pro, Binary Ninja, Ghidra, GDB, WinDbg, UART, SPI, I2C, TLS, SSH, RTOS
2w
Save
Mark Applied
Hide
Vulnerability Researcher
Herndon, Virginia, United States
$150k-$300k/yr OnsiteFull Time
Redhorse
Redhorse: Delivering data insights and technology solutions to government agencies.
7+ YOEActive TS/SCI clearance and 7+ years vulnerability research, reverse engineering, exploit development, programming (C,C++,Java,JavaScript), and mobile malware analysis for iOS/Android.
C, C++, Java, JavaScript, IDA Pro, OllyDbg, Windbg, Windows, Linux/Unix
3w
Save
Mark Applied
Hide
Vulnerability Researcher, Senior
Fort Meade, Maryland, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
6+ YOETS/SCI with polygraph required; 6+ years vulnerability research or 2+ years with relevant degree; reverse engineering, exploit development, scripting, OS and DevOps experience.
Perl, Java, Python, Bash, PowerShell, Windows, Linux, Mac, Git, Jenkins, Docker, CI/CD
2mo
Save
Mark Applied
Hide
iOS Vulnerability Researcher (Remote)
Tysons or United States or Israel
RemoteFull Time
Cellebrite
CellebriteNASDAQ: CLBT: Provider of digital forensic and investigative intelligence software solutions.
Proven vulnerability research experience (preferably iOS), advanced exploitation skills, ARM reverse engineering, knowledge of cryptographic primitives; hardware research is an advantage; ethical security research focus.
3w
Save
Mark Applied
Hide
Vulnerability Researcher, Senior
Fort Meade, Maryland, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
6+ YOE6+ years vulnerability research or 2+ years with bachelor’s and experience in reverse engineering, exploit development, scripting (Perl, Java, Python, Bash, PowerShell), Windows/Linux/Mac, DevOps and CI/CD tools.
Perl, Java, Python, Bash, PowerShell, Git, Jenkins, Docker, CI/CD, Android, IOS
3mo
Save
Mark Applied
Hide
Senior Vulnerability Researcher (76230)
Columbus or Chantilly or Beavercreek
HybridFull Time
Battelle
Battelle: Conducts scientific research and manages national laboratories for clients.
5+ YOEBachelor’s in CS/CE/EE with 8y exp or Master’s with 5y or PhD with 2y, plus strong vulnerability research, disassembly, debugging, and OS knowledge; US citizenship and ability to obtain Secret clearance.
Ghidra, IDA Pro, BinaryNinja, WinDbg, OllyDbg, gdb, C, assembly, network protocols
2mo
Save
Mark Applied
Hide
SME CNO Vulnerability Researcher
Fort Meade, Maryland, United States
OnsiteFull Time
Core4ce
Core4ce: Provider of data-driven national security and defense technology solutions.
7+ YOETS/SCI with Poly, 7+ years vulnerability research, experience in reverse engineering, strong low-level software analysis, and proficiency with standard security tools.
IDA Pro, Ghidra, Radare2, Binary Ninja, Sysinternals, GDB, WinDBG, Python, C/C++, Assembly
3mo
Save
Mark Applied
Hide
iOS Vulnerability Researcher
Arlington, Virginia, United States
RemoteFull Time
Interrupt Labs
Interrupt Labs: Provides specialized vulnerability research and offensive security services.
Experience in vulnerability research, offensive security, and reverse engineering on Apple platforms; proficient in Python and Rust; able to reverse engineer ARM64 and use IDA, Binary Ninja, Frida.
Python, Rust, C, Swift, C++, Objective-C, IDA, Binary Ninja, Frida
2mo
Save
Mark Applied
Hide
CNO Vulnerability Researcher, SME
Columbia, Maryland, United States
$150k-$275k/yr OnsiteFull Time
Navstar
Navstar: Provides IT and cybersecurity solutions to the intelligence community.
7+ YOEActive TS/SCI with Polygraph; 7+ years position-specific vulnerability research and reverse engineering experience; proficiency with IDA Pro, Ghidra, Binary Ninja, GDB, WinDBG, Python, C/C++, and low-level OS internals.
IDA Pro, Ghidra, Radare, Binary Ninja, Microsoft Sysinternals, GDB, WinDBG, Python, C, C++, Assembly
2mo
Save
Mark Applied
Hide
Vulnerability Researcher
Annapolis Junction, Maryland, United States
OnsiteFull Time
BigBear.ai
BigBear.aiNYSE: BBAI: Provides AI-powered decision intelligence software for national security.
5+ YOEActive TS/SCI with Poly, minimum 5 years technical experience (BS in technical discipline or equivalent), 4+ years programming in Assembly/C/C#/C++/Perl/Python, reverse engineering and exploit development experience.
Assembly, C, C#, C++, Perl, Python
2mo
Save
Mark Applied
Hide
Mobile Vulnerability Researcher
Chantilly, Virginia, United States
OnsiteFull Time
REDLattice
REDLattice: Provides advanced cybersecurity software and vulnerability research services.
3+ YOE3+ years vulnerability research or reverse engineering experience; strong Android and low-level systems knowledge; proficiency in C/C++, Python; experience with IDA Pro/Ghidra/Frida; bachelor’s in CS or CE (or equivalent); TS/SCI eligibility.
Android, C, C++, Python, IDA Pro, Ghidra, Frida
1mo
Save
Mark Applied
Hide
Vulnerability Researcher-Junior
Annapolis Junction, Maryland, United States
OnsiteFull Time
NetSage
NetSage: Delivering specialized cyber services to the U.S. federal government.
2+ YOETS/SCI with polygraph; B.S. in Computer Science or 2+ years relevant experience; 2+ years programming in Assembly, C, C#, C++, Perl, or Python; 2+ years reverse engineering; debugging and reporting experience.
Assembly, C, C#, C++, Perl, Python
2w
Save
Mark Applied
Hide
Principal Vulnerability Researcher
Annapolis Junction, Maryland, United States
$99k-$206k/yr OnsiteFull Time
Nightwing
Nightwing: Provides advanced cyber and intelligence solutions for national security.
10+ YOETS/SCI with CI poly required, US citizen, BS in a technical field with ~10 years' experience; strong software development, reverse engineering, and exploit skills (C/C++/Python, IDA Pro, Ghidra, angr, etc.).
C, C++, Python, angr, BAP, IDA Pro, Binary Ninja, gdb, Ghidra, windbg
1w
Save
Mark Applied
Hide
Senior Cyber Vulnerability Researcher - TS/SCI required
Centreville or United States
$112k-$196k/yr HybridFull Time
Parsons
ParsonsNYSE: PSN: Provides engineering and technology services for infrastructure and defense.
8+ YOEBachelor's degree and 8+ years of professional experience required. Active TS/SCI clearance and U.S. citizenship required; Python, Java, C++, Linux, virtualization, and cyber vulnerability research expertise needed.
Python, Scapy, Caldera, Metasploit, Bash, Java, Selenium, C++, Linux, Ubuntu, Red Hat, Rocky, VMware, KVM, Proxmox, MITRE ATT&CK Framework
1mo
Save
Mark Applied
Hide
X-Day Offensive Research (XOR) Vulnerability Researcher
Jersey City or Washington or Chicago or Plano or Houston or Tampa or Atlanta or Wilmington or McLean or Columbus
$152k-$260k/yr OnsiteFull Time
JPMorgan Chase
JPMorgan ChaseNYSE: JPM: Global financial services firm providing banking and investment solutions.
5+ YOE5+ years cybersecurity experience with vulnerability research, reverse engineering, exploit development, and assessments; strong OS internals and analysis skills; proven CVE track record; excellent communication.
IDA Pro, Ghidra, Binary Ninja, WinDbg, GDB, RR, LibFuzzer, LibAFL, AFL++, OSS-Fuzz, Syzkaller, LLVM, Angr, KLEE, Intel Pin, DynamoRIO, Frida, C/C++, Java, .NET, Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework
3mo
Save
Mark Applied
Hide
Cyber Security Vulnerability Researcher
Patuxent River, Maryland, United States
OnsiteFull Time
Tharros
Tharros: Provides specialized cybersecurity defense and vulnerability research services.
7+ YOEActive TS, SCI Eligible; DCWF qualification; 7 years vulnerability research or equivalent; reverse engineering, binary analysis, exploitation development; experience in DoD classified environments.
reverse engineering, binary analysis, exploit development, vulnerability assessment, cyber threat emulation