Senior Vulnerability Researcher/Reverse Engineer

Senior Vulnerability Researcher / Reverse Engineer

NBP1 | CNMF JTF-0

Job Description

X8 is seeking a Senior Vulnerability Researcher / Reverse Engineer to support U.S. Cyber Command (USCYBERCOM) under the PURPLEPIRANHA program.

Conduct advanced vulnerability research and reverse engineering of software, firmware, and hardware to identify exploitable weaknesses and support cyberspace capability development.

What You'll Be Doing

• Perform technical analysis of target platforms to identify potential zero-day vulnerabilities through fuzzing and code analysis.
• Client vulnerabilities using automated fuzzing, manual code review, and static/dynamic analysis.
• Reverse engineer applications, firmware, and hardware with disassemblers, debuggers, and binary analysis tools.
• Rapidly prototype proof-of-concept exploits to validate findings and assess operational utility.
• Analyze system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
• Document vulnerability details, exploitation methodologies, and recommended capability development approaches.
• Brief capability developers on technical findings, target weaknesses, and exploitation pathways.
• Collaborate with capability developers to translate vulnerability research into operational tools.
• Track public vulnerability disclosures, exploitation techniques, and relevant adversary tradecraft.
• Apply offensive cyber expertise, including red/purple team activities, to mission solutions; conduct limited TDY travel as needed.
  
  

What Required Skills You'll Bring

• Active TS/SCI clearance with CI polygraph.
• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related technical field and 10 years of experience; or master's degree and 8 years.
• Proficiency with IDA Pro, Ghidra, and/or Binary Ninja disassemblers/decompilers.
• Strong understanding of x86/x64/ARM assembly and processor architectures.
• Practical experience with WinDbg, GDB, and/or LLDB debuggers and dynamic analysis tools.
• Demonstrated vulnerability discovery in compiled C/C /Rust software.
• Understanding of memory corruption, logic flaws, race conditions, and related vulnerability classes.
• Proficiency with AFL, libFuzzer, Honggfuzz, and fuzzing corpus management.
• Strong Python, Ruby, or similar scripting for automation and analysis.
• Experience documenting technical research for technical and operational audiences.
  
  

What Desired Skills You'll Bring

• USCYBERCOM JQR (Joint Qualification Record) qualification.
• Windows kernel/driver reverse engineering; firmware and embedded systems analysis.
• Network protocol vulnerability research; UEFI/BIOS or bootloader security analysis.
• Published vulnerability research (CVEs, conference presentations, or blog posts).
• Familiarity with symbolic execution and taint analysis tools.
• Understanding of offensive cyberspace operations workflows and prior red/purple team or equivalent contract/civilian experience.
  
  

WHY JOIN X8?

• Support USCYBERCOM cyberspace capability development and vulnerability research.
• Work with mission-focused technical teams on challenging reverse-engineering problems.
• Contribute research that informs operational cyber capabilities.
• Competitive benefits and professional growth opportunities.
  
  

Minimum Clearance Required

• Active TS/SCI with CI polygraph required.
  
  

Compensation

• $150,000 (depending on education and experience)
• Bonus potential
• 401K Match - 10%
• Paid time off - 24 PTO Days, 13 Holiday
• Medical Benefits - 100% Employee, 80% Dependent, $1000 company paid HSA Contribution