Senior Vulnerability Researcher

About the Role

Redhorse is transforming how the government utilizes data and technology. We are seeking a self-motivated Senior Vulnerability Researcher who is ready to solve some of the most challenging technical problems in a fast-paced environment supporting national security.

In this role, you will be a key driver of our cyber mission, applying advanced vulnerability research (VR), reverse engineering (RE), and vulnerability exploitation (VE) skills to support critical defensive and offensive cyber requirements. As a senior member of our team, you will operate with a high degree of autonomy, solving complex problems with minimal oversight while mentoring the next generation of technical talent. Your work will directly impact the safety and efficacy of national security operations.

Key Responsibilities

• Apply a variety of VR techniques-including fuzzing, RE, and online research-to identify vulnerabilities and determine exploitability.
• Develop proof-of-concept software and creative solutions to meet diverse customer requirements.
• Perform vulnerability assessments of secure technologies to determine if protected or inaccessible information is recoverable.
• Manage customer expectations by implementing proactive feedback mechanisms and providing technical insights.
• Prepare and deliver concise presentations and reports summarizing research findings for technical and non-technical stakeholders.
• Collaborate with internal and external stakeholders to identify and communicate operational requirements.
• Shape Computer Architecture (CA) requirements to ensure they align with broader operational goals.
• Synthesize technical and operational information to develop innovative solutions for complex cyber challenges.
• Mentor junior personnel, providing technical guidance and fostering a culture of continuous learning.

Required Experience/Clearance

• Active TS/SCI security clearance.
• Seven (7)+ years of professional experience in vulnerability research.
• Proven expertise in programming within contemporary Windows and Linux/Unix environments.
• Proficiency in multiple languages including C, C++, Java, and JavaScript.
• Extensive experience using reverse engineering tools such as IDA Pro, OllyDbg, and Windbg.
• Demonstrated experience reverse engineering Windows/Linux applications and OS kernel modules.
• Exceptional written and oral communication skills, with the ability to explain complex technical concepts clearly.

Desired Experience

• Experience with network protocol analysis and deep-packet inspection.
• Static and dynamic malware analysis experience for mobile platforms, specifically iOS and Android.
• Knowledge of software engineering with a focus on workflow automation for existing security tools.
• Proficiency in identifying discreet, complex communications technologies that support investigative techniques.
• Advanced Vulnerability Exploitation (VE) capabilities, including understanding the relationship between analysis concepts and computational resource requirements.