Principal Reverse Engineering/Vulnerability Research Engineer

The role

You will independently execute complex vulnerability research and reverse engineering assignments. You will investigate system behavior, identify weaknesses, and develop reproducible demonstrations of their impact.

What you will do

• Plan and execute assigned research efforts and deliver results.
• Perform static and dynamic analysis using disassemblers, debuggers, emulators, tracers, and fuzzers.
• Identify vulnerabilities and conduct root-cause analysis.
• Develop reliable proof-of-concept exploits and operational exploit components.
• Adjust research tools and processes and recommend enhancements.
• Build reusable tooling and automation.
• Communicate progress, risks, findings, and recommendations to stakeholders.
• Collaborate within and outside the research team.
• Provide guidance and assistance to junior researchers and participate in peer reviews.

Required qualifications

• Secret security clearance with the ability to obtain and maintain a TS/SCI security clearance
• U.S. citizenship is required
• Bachelor’s degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline, or equivalent experience
• Minimum of 5 years of prior relevant experience
• Demonstrated ability to independently conduct vulnerability research and reverse engineering
• Experience using Ghidra, Binary Ninja, IDA, or comparable reverse engineering and disassembly tools
• Strong knowledge of Linux fundamentals, including sockets, file descriptors, networking, iptables, file systems, and kernel behavior
• Ability to troubleshoot basic networking issues
• Ability to read and write C and analyze assembly for architectures such as ARM, MIPS, or x86-64
• Strong programming fundamentals, including networking, data structures, and data models
• Practical experience with exploitation techniques such as arbitrary read/write primitives, shellcode development, return-oriented programming, or jump-oriented programming
• Experience adjusting research methods or recommending tooling and process improvements

Nice to have

• Active Top Secret security clearance
• Experience reverse engineering operating systems and kernels
• Experience with AFL++ or libFuzzer and security mechanisms such as SELinux, seccomp, ASLR, and control-flow integrity
• Experience with GDB, gdbserver, compiler toolchains, and the Android Native Development Kit
• Experience using QEMU or Unicorn to emulate code in non-native environments
• Demonstrated experience discovering previously unknown vulnerabilities, including zero-days
• Experience coordinating a research workstream, reviewing peers’ findings, or mentoring junior researchers

Benefits

• Performance-based bonuses
• Extensive medical, dental, and vision coverage
• 401(k) plan with company match
• Substantial paid time off and holidays
• Flexible work arrangements where possible
• Income protection benefits

Before you apply

• Secret security clearance with the ability to obtain and maintain a TS/SCI security clearance
• U.S. citizenship is required

About the company

Clarity Innovations is a national security partner that equips customers with technology, expertise, and support to conduct cyber operations. The company focuses on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring.