Overview
Remote
On-site
Compensation
$150,000-$150,000/year
Job Description
Senior Vulnerability ResearcherNBP1 | CNMF JTF-0
JOB DESCRIPTION X8 is seeking a Senior Vulnerability Researcher to support specialized cyber operations for U.S. Cyber Command (USCYBERCOM) under the PURPLEPIRANHA program. Research target software, firmware, and hardware to Client exploitable vulnerabilities and translate findings into mission-relevant cyberspace capabilities.WHAT YOU'LL BE DOING- Conduct advanced vulnerability research and reverse engineering of target software and hardware systems.
- Client potential zero-day vulnerabilities through fuzzing, static analysis, and code review.
- Reverse engineer applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
- Develop proof-of-concept exploits to validate findings and assess operational utility.
- Analyze architectures, protocols, and security controls to identify attack surfaces and vulnerability patterns.
- Document vulnerability findings, exploitation methodologies, and recommended development approaches.
- Brief capability developers on target weaknesses, technical findings, and exploitation pathways.
- Collaborate with development teams to translate research into operational tools.
- Monitor public vulnerability disclosures, exploit techniques, and relevant adversary tradecraft.
- Conduct limited mission-related travel as required.
- Active TS/SCI clearance with polygraph (CI polygraph required by requisition).
- Bachelor's degree in a related technical field with 10+ years of relevant experience, or a master's degree with 8+ years.
- Expert proficiency with IDA Pro, Ghidra, Binary Ninja, or comparable disassemblers/decompilers.
- Strong knowledge of x86, x64, and ARM assembly and processor architectures.
- Hands-on experience with WinDbg, GDB, LLDB, and dynamic analysis tools.
- Demonstrated vulnerability discovery in compiled C, C++, or Rust applications.
- Knowledge of memory corruption, logic flaws, race conditions, and other vulnerability classes.
- Proficiency with AFL, libFuzzer, Honggfuzz, or similar fuzzing frameworks and corpus management.
- Strong Python, Ruby, or similar scripting skills for automation and analysis.
- Ability to document and communicate research to technical and operational audiences.
WHAT DESIRED SKILLS YOU'LL BRING
- Windows kernel or driver reverse engineering.
- Firmware, embedded systems, UEFI/BIOS, or bootloader security analysis.
- Network protocol analysis and vulnerability research.
- Published vulnerability research, CVEs, conference presentations, or technical articles.
- Familiarity with symbolic execution and taint analysis.
- Understanding of offensive cyberspace operations workflows.
WHY JOIN X8?
- Support high-impact USCYBERCOM cyber capability research and development.
- Collaborate with technical teams solving complex mission challenges.
- Contribute to a specialized national security mission.
- Competitive benefits and professional growth opportunities.
- Active TS/SCI with CI polygraph required.
COMPENSATION
- $150,000+ (depending on education and experience)
- Bonus potential
- 401K Match – 10%
- Paid time off – 24 PTO Days, 13 Holidays
- Medical Benefits – 100% Employee, 80% Dependent, $1000 company paid HSA Contribution
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
FAQs About Senior Vulnerability Resear Her Jobs at X8 LLC
What is the work location for this position at X8 LLC?
This job at X8 LLC is located in Columbia, MD, according to the details provided by the employer. Some roles may also include multiple work locations depending on the requirement.
What pay range can candidates expect for this role at X8 LLC?
Candidates can expect a pay range of $150,000 and $150,000 per year.
What employment applies to this position at X8 LLC?
The employer has not provided this information. This may be discussed during the hiring process.
What is the process to apply for this position at X8 LLC?
You can apply for this role at X8 LLC either through Sonara's automated application system, which helps you submit applications 10X faster with minimal effort, or by applying manually using the direct link on the job page.