Sr. Principal Reverse Engineering/Vulnerability Research Engineer

The role

You will perform vulnerability research and reverse engineering for customer tasks. You will use static and dynamic analysis to find, document, and exploit weaknesses in multiple types of systems.

What you will do

• Perform vulnerability research and reverse engineering for customer tasks
• Perform advanced static and dynamic analysis using disassemblers, debuggers, emulators, tracers, and fuzzers
• Develop reliable proof-of-concept and operational exploit capabilities leveraging discovered vulnerabilities
• Research and bypass modern exploit mitigations security mechanisms
• Build internal tooling, automation, and research infrastructure to accelerate vulnerability discovery and analysis
• Perform root-cause analysis on vulnerabilities and communicate findings to technical and non-technical stakeholders
• Communicate security research findings internally and externally
• Mentor fellow security researchers
• Lead small to medium sized teams of Security Researchers for full project lifecycle

Required qualifications

• LLM-assisted RE/VR experience
• Static and Dynamic UNIX RE experience
• Exploit development defeating security mitigations experience
• Experience writing custom RE tools such as fuzzers, decompiler plugins, and program analysis tools
• UNIX kernel RE/VR experience
• Exploit development defeating modern security mitigations experience
• Hardware RE/VR experience
• Experience integrating productized capabilities into CNO tools
• Team lead experience
• Experience working with customers to develop requirements
• Ability to collaborate with CNO teams to integrate productized capabilities

Nice to have

• Windows as well as UNIX

Benefits

• Performance-based bonuses
• Medical coverage
• Dental coverage
• Vision coverage
• 401(k) plan with company match
• Substantial paid time off and holidays
• Flexible work arrangements where possible
• Income protection benefits

About the company

Clarity Innovations is a national security partner that delivers solutions to the Intelligence Community (IC) and Department of Defense (DoD). Their platform modernizes data operations using advanced workflows and secure DevSecOps practices.