Senior Reverse Engineering/Vulnerability Research Engineer

The role

You will lead vulnerability research and reverse engineering efforts to identify security weaknesses. You will perform static and dynamic analysis, develop exploits, and provide technical leadership to research teams.

What you will do

• Lead vulnerability research and reverse engineering efforts aligned with customer objectives.
• Define research strategies, assess technical feasibility, and guide teams through project planning, execution, and delivery.
• Perform advanced static and dynamic analysis using disassemblers, debuggers, emulators, tracers, and fuzzers.
• Identify vulnerabilities, conduct root-cause analysis, and document reproducible findings.
• Develop reliable proof-of-concept exploits and operational exploit capabilities.
• Evaluate and bypass modern exploit mitigations and security mechanisms.
• Build tooling, automation, and research infrastructure.
• Communicate research progress, technical risks, findings, and recommendations to stakeholders.
• Share research findings internally and externally when authorized.
• Mentor security researchers and lead small to medium-sized research teams.

Required qualifications

• TS/SCI security clearance
• U.S. citizenship is required
• Bachelor’s degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline or four years of hands-on experience in software engineering or a comparable full-t
• Demonstrated experience conducting vulnerability research and reverse engineering
• Experience providing technical leadership and mentoring engineers or security researchers
• Experience using Ghidra, Binary Ninja, IDA, or comparable reverse engineering and disassembly tools
• Strong knowledge of Linux internals and fundamentals, including sockets, file descriptors, networking, iptables, file systems, and kernel behavior
• Ability to read and write C and work with assembly languages for architectures such as ARM, MIPS, and x86-64
• Strong programming fundamentals, including networking, data structures, and data models
• Understanding of exploitation techniques, including arbitrary read/write primitives, shellcode development, return-oriented programming, and jump-oriented programming
• Experience participating in capture-the-flag competitions, hackathons, or other cybersecurity competitions
• Ability to clearly communicate complex technical concepts and produce actionable research documentation

Nice to have

• Experience reverse engineering operating systems and kernels
• Experience with fuzzing tools such as AFL++ or libFuzzer
• Knowledge of security controls and exploit mitigations, including SELinux, seccomp, ASLR, and control-flow integrity
• Advanced dynamic analysis experience using GDB, gdbserver, or comparable tools
• Familiarity with processor toolchains and the Android Native Development Kit
• Experience using QEMU or Unicorn to emulate code in non-native environments
• Demonstrated experience discovering previously unknown vulnerabilities, including zero-days

Benefits

• Performance-based bonuses
• Extensive medical, dental, and vision coverage
• 401(k) plan with company match
• Substantial paid time off and holidays
• Flexible work arrangements where possible
• Income protection benefits

Before you apply

• TS/SCI security clearance required
• U.S. citizenship is required

About the company

Clarity Innovations is a national security partner that equips customers with technology, expertise, and support to conduct cyber operations. The company focuses on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring.