Vulnerability Researcher

About the Role

Redhorse transforms the way government uses data and technology. To support this mission, we are seeking a self-motivated Senior Vulnerability Researcher who is ready to solve some of the most challenging technical problems in a fast-paced environment supporting national security.

In this role, you will apply advanced vulnerability research (VR), reverse engineering (RE), and vulnerability exploitation (VE) skills to support a variety of defensive and offensive cyber requirements. As a senior member of our team, you will perform high-impact research with minimal guidance and have the opportunity to mentor junior personnel, directly influencing the technical direction of critical mission objectives.

Key Responsibilities

• Apply a variety of VR techniques-including fuzzing, reverse engineering, and experimentation-to identify vulnerabilities and determine exploitability.
• Develop proof-of-concept software and functional prototypes to meet diverse customer requirements.
• Manage customer expectations by implementing proactive feedback mechanisms and iterative reporting.
• Prepare and deliver concise technical presentations summarizing research findings for stakeholders.
• Collaborate with internal and external stakeholders to align research with operational needs.
• Shape Capability (CA) requirements to ensure technical solutions meet broader operational goals.
• Synthesize creative technical solutions from complex operational and technical information.
• Identify and communicate operational requirements to ensure mission success.
• Perform vulnerability assessments of secure technologies to determine if protected or inaccessible information is recoverable.

Required Experience/Clearance

• 7+ years of experience in vulnerability research.
• Active TS/SCI security clearance.
• 7+ years of expertise in programming within contemporary Windows and Linux/Unix software development environments.
• 7+ years of experience in multiple languages including C, C++, Java, and JavaScript.
• 7+ years of experience using reverse engineering tools such as IDA Pro, OllyDbg, and Windbg.
• Strong written and oral communication skills, with the ability to explain complex technical concepts to non-technical audiences.
• Static and dynamic malware analysis experience for mobile platforms, specifically iOS and Android.