Senior Vulnerability Resear her

Senior Vulnerability Researcher

NBP1 | CNMF JTF-0

Job Description

X8 is seeking a Senior Vulnerability Researcher to support specialized cyber operations for U.S. Cyber Command (USCYBERCOM) under the PURPLEPIRANHA program.

Research target software, firmware, and hardware to Client exploitable vulnerabilities and translate findings into mission-relevant cyberspace capabilities.

What You'll Be Doing

• Conduct advanced vulnerability research and reverse engineering of target software and hardware systems.
• Client potential zero-day vulnerabilities through fuzzing, static analysis, and code review.
• Reverse engineer applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
• Develop proof-of-concept exploits to validate findings and assess operational utility.
• Analyze architectures, protocols, and security controls to identify attack surfaces and vulnerability patterns.
• Document vulnerability findings, exploitation methodologies, and recommended development approaches.
• Brief capability developers on target weaknesses, technical findings, and exploitation pathways.
• Collaborate with development teams to translate research into operational tools.
• Monitor public vulnerability disclosures, exploit techniques, and relevant adversary tradecraft.
• Conduct limited mission-related travel as required.
  
  

What Required Skills You'll Bring

• Active TS/SCI clearance with polygraph (CI polygraph required by requisition).
• Bachelor's degree in a related technical field with 10 years of relevant experience, or a master's degree with 8 years.
• Expert proficiency with IDA Pro, Ghidra, Binary Ninja, or comparable disassemblers/decompilers.
• Strong knowledge of x86, x64, and ARM assembly and processor architectures.
• Hands-on experience with WinDbg, GDB, LLDB, and dynamic analysis tools.
• Demonstrated vulnerability discovery in compiled C, C , or Rust applications.
• Knowledge of memory corruption, logic flaws, race conditions, and other vulnerability classes.
• Proficiency with AFL, libFuzzer, Honggfuzz, or similar fuzzing frameworks and corpus management.
• Strong Python, Ruby, or similar scripting skills for automation and analysis.
• Ability to document and communicate research to technical and operational audiences.
  
  

What Desired Skills You'll Bring

• Windows kernel or driver reverse engineering.
• Firmware, embedded systems, UEFI/BIOS, or bootloader security analysis.
• Network protocol analysis and vulnerability research.
• Published vulnerability research, CVEs, conference presentations, or technical articles.
• Familiarity with symbolic execution and taint analysis.
• Understanding of offensive cyberspace operations workflows.
  
  

WHY JOIN X8?

• Support high-impact USCYBERCOM cyber capability research and development.
• Collaborate with technical teams solving complex mission challenges.
• Contribute to a specialized national security mission.
• Competitive benefits and professional growth opportunities.
  
  

Minimum Clearance Required

• Active TS/SCI with CI polygraph required.
  
  

Compensation

• $150,000 (depending on education and experience)
• Bonus potential
• 401K Match - 10%
• Paid time off - 24 PTO Days, 13 Holidays
• Medical Benefits - 100% Employee, 80% Dependent, $1000 company paid HSA Contribution