Principal Reverse Engineering/Vulnerability Research Engineer

Clarity Innovations is a trusted national security partner, dedicated to safeguarding our nation’s interests and delivering innovative solutions that empower the Intelligence Community (IC) and Department of Defense (DoD) to transform data into actionable intelligence, ensuring mission success in an evolving world.

Our mission-first software and data engineering platform modernizes data operations, utilizing advanced workflows, CI/CD, and secure DevSecOps practices. We focus on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring, enabling end-to-end solutions that drive operational impact.

We are committed to delivering cutting-edge tools and capabilities that address the most complex national security challenges, empowering our partners to stay ahead of emerging threats and ensuring the success of their critical missions. At Clarity, we are people-focused and set on being a destination employer for top talent, offering an environment where innovation thrives, careers grow, and individuals are valued. Join us as we continue to lead innovation and tackle the most pressing challenges in national security.

Principal Security Researcher 

Discipline: Reverse Engineering / Vulnerability Research

Location: Rome, NY

Clearance: Secret with the ability to obtain and maintain TS/SCI

Company Overview

Clarity Innovations equips customers with the technology, expertise, and support needed to conduct successful cyber operations. We bring together talented engineers, researchers, and operators to solve some of the U.S. Government’s most challenging technical problems. Our teams combine technical excellence, creativity, and collaboration to deliver capabilities that advance customer missions.

Role

Clarity Innovations is seeking a Senior Principal Security Researcher to independently execute complex vulnerability research and reverse engineering assignments. You will investigate system behavior, identify weaknesses, and develop reproducible demonstrations of their impact within customer-authorized research activities.

You will own defined research efforts from planning through delivery, select appropriate analysis methods, and adjust approaches as evidence develops. Your contributions will significantly affect research outcomes and may influence departmental results. The role requires practical technical knowledge, collaboration within and occasionally outside the research team, and the ability to recommend improvements and assist junior researchers.

Responsibilities

• Independently plan and execute assigned research efforts, define milestones, assess feasibility, and deliver results aligned with customer priorities.
• Perform static and dynamic analysis using disassemblers, debuggers, emulators, tracers, and fuzzers.
• Identify vulnerabilities, conduct root-cause analysis, and document reproducible findings and technical limitations.
• Develop reliable proof-of-concept exploits and operational exploit components for authorized customer requirements; evaluate and bypass relevant mitigations.
• Adjust research tools and processes, and recommend enhancements that improve the effectiveness of the research team.
• Build reusable tooling and automation to accelerate discovery, analysis, and validation.
• Communicate progress, risks, findings, and recommendations to technical and non-technical stakeholders; share results externally when authorized.
• Collaborate within and occasionally outside the research team to resolve dependencies and build support for research approaches.
• Provide guidance and assistance to junior researchers, participate in peer reviews, and coordinate technical tasks within assigned efforts.

Minimum Qualifications

• Secret security clearance with the ability to obtain and maintain a TS/SCI security clearance; U.S. citizenship is required.
• Bachelor’s degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline, or equivalent experience, and a minimum of 5 years of prior relevant experience.
• Demonstrated ability to independently conduct vulnerability research and reverse engineering, taking defined investigations from planning through documented results.
• Experience using Ghidra, Binary Ninja, IDA, or comparable reverse engineering and disassembly tools.
• Strong knowledge of Linux fundamentals, including sockets, file descriptors, networking, iptables, file systems, and kernel behavior; ability to troubleshoot basic networking issues.
• Ability to read and write C and analyze assembly for architectures such as ARM, MIPS, or x86-64.
• Strong programming fundamentals, including networking, data structures, and data models.
• Practical experience with exploitation techniques such as arbitrary read/write primitives, shellcode development, return-oriented programming, or jump-oriented programming.
• Experience adjusting research methods or recommending tooling and process improvements to solve technical problems.
• Ability to collaborate across technical boundaries, explain findings clearly, and provide guidance to less experienced contributors.
• Experience participating in capture-the-flag competitions, hackathons, or other cybersecurity competitions.

Preferred Qualifications

• Active Top Secret security clearance.
• Experience reverse engineering operating systems and kernels.
• Experience with AFL++ or libFuzzer and security mechanisms such as SELinux, seccomp, ASLR, and control-flow integrity.
• Experience with GDB, gdbserver, compiler toolchains, and the Android Native Development Kit.
• Experience using QEMU or Unicorn to emulate code in non-native environments.
• Demonstrated experience discovering previously unknown vulnerabilities, including zero-days.
• Experience coordinating a research workstream, reviewing peers’ findings, or mentoring junior researchers.

Salary Range: $145,900 - $248,000

Pay Range

The posted pay range reflects the anticipated base salary range for this position and is provided to give candidates a general understanding of the compensation opportunity. The actual salary offered will be determined based on the requirements of the position and a variety of job-related factors, which may include geographic location, applicable Federal Government contract labor categories and wage rates, relevant experience, skills and competencies, education, certifications, and the scope and responsibilities of the role.

Because this position may be performed in multiple locations and may be subject to different contract requirements, the salary ultimately offered may vary based on the applicable location and contract. The posted range is not a guarantee of a specific starting salary or an indication that an offer will be made at any particular point within the range.

Total Rewards

In addition to competitive base pay, Clarity provides a Total Rewards package designed to attract and retain exceptional professionals committed to excellence. Our benefits reflect the value we place on skilled individuals who drive our impact in critical digital missions.

At Clarity, a career means joining a high-performing team advancing vital work in the digital landscape. We encourage you to consider the total value of joining us-competitive compensation, comprehensive benefits, and resources that support your growth and impact.

Our Total Rewards package includes performance-based bonuses, extensive medical, dental, and vision coverage, a 401(k) plan with company match, substantial paid time off and holidays, flexible work arrangements where possible, and a range of income protection benefits. We are committed to supporting your well-being, professional growth, and ability to contribute to essential digital missions.

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.