Clarityinnovates
Principal Reverse Engineering/Vulnerability Research Engineer
Herndon, VA. Posted a month ago
The role
You will perform vulnerability discovery by dismantling complex software and hardware systems. You will use a hypothesis-driven approach to investigate undocumented systems and build custom utilities.
What you will do
- Achieve operational targets with a significant impact on the job area.
- Make adjustments or recommend enhancements to systems and processes.
- Communicate and collaborate within and occasionally outside of own job area.
- Provide guidance and assistance to junior individual contributors.
- Perform vulnerability discovery on software and hardware.
- Build custom utilities when off-the-shelf tools fall short.
Required qualifications
- University Degree (BA/BS) or equivalent experience
- Minimum 5 years of prior relevant experience
- Deep experience with the Windows OS architecture, kernel, hardware abstraction layer, Win32 API, memory management, and security mitigations
- Expert-level understanding of Windows binary formats, calling conventions, and execution flows
- Advanced knowledge of Windows-related file systems
- Knowledge of Windows networking stack and proprietary protocols
- Strong knowledge of static and dynamic analysis tools and methods
- Fluent in x86/x64 assembly, ARM assembly, C/C++, and Python
- Great communication skills and ability to integrate work products with other tools
Nice to have
- Experience with creating and orchestrating automated AI workflows, integrating traditional reverse engineering tools
- Experience with frontier models (e.g., GPT-5, Claude), Binary Ninja, Ghidra, IDA Pro, WinDbg
Benefits
- Performance-based bonuses
- Medical coverage
- Dental coverage
- Vision coverage
- 401(k) plan with company match
- Substantial paid time off and holidays
- Flexible work arrangements where possible
- Income protection benefits
About the company
Clarity Innovations is a national security partner that delivers solutions to the Intelligence Community (IC) and Department of Defense (DoD). Their platform modernizes data operations using advanced workflows and secure DevSecOps practices.