Clarityinnovates

Sr. Principal Reverse Engineering/Vulnerability Research Engineer

Rome, NY. Posted a month ago

The role

You will provide advanced technical leadership for complex vulnerability research and reverse engineering efforts. You will lead research efforts, improve research methods, and coach other professionals.

What you will do

  • Lead complex research efforts from strategy and feasibility assessment through execution, validation, and delivery.
  • Resolve difficult research problems through advanced static and dynamic analysis.
  • Guide vulnerability discovery, root-cause analysis, exploit development, and mitigation bypass.
  • Evaluate exploit reliability and research evidence.
  • Improve processes, systems, and work methods across the research function.
  • Guide development of reusable tooling, automation, and research infrastructure.
  • Influence stakeholders on research practices, technical procedures, and proposed policy improvements.
  • Lead technical coordination for small to medium-sized research teams.
  • Coach and train other professionals, review technical work, and communicate findings to customers and partners.

Required qualifications

  • Secret security clearance with the ability to obtain and maintain a TS/SCI security clearance
  • U.S. citizenship is required
  • Bachelor’s degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline, or equivalent experience
  • Minimum of 7 years of prior relevant experience
  • Advanced knowledge of vulnerability research and reverse engineering
  • Experience using Ghidra, Binary Ninja, IDA, or comparable reverse engineering and disassembly tools
  • Strong knowledge of Linux fundamentals, including sockets, file descriptors, networking, iptables, file systems, and kernel behavior
  • Strong understanding of TCP/IP, routing, switching, and common network protocols
  • Experience using packet capture and analysis tools such as Wireshark or tcpdump
  • Ability to read and write C and analyze assembly for architectures such as ARM, MIPS, or x86-64
  • Strong programming fundamentals, including networking, data structures, and data models
  • Experience developing reliable exploits, applying techniques such as arbitrary read/write primitives and return- or jump-oriented programming, and evaluating modern mitigations

Nice to have

  • Active Top Secret security clearance
  • Experience reverse engineering operating systems and kernels
  • Experience with AFL++ or libFuzzer and security mechanisms such as SELinux, seccomp, ASLR, and control-flow integrity
  • Experience with GDB, gdbserver, compiler toolchains, and the Android Native Development Kit
  • Experience using QEMU or Unicorn to emulate code in non-native environments
  • Demonstrated experience discovering previously unknown vulnerabilities, including zero-days
  • Experience leading technical reviews and research teams, establishing shared research practices, and guiding customer discussions on research priorities

Benefits

  • Performance-based bonuses
  • Extensive medical, dental, and vision coverage
  • 401(k) plan with company match
  • Substantial paid time off and holidays
  • Flexible work arrangements where possible
  • Income protection benefits

Before you apply

  • Secret security clearance with the ability to obtain and maintain a TS/SCI security clearance
  • U.S. citizenship is required

About the company

Clarity Innovations is a national security partner that provides technology, expertise, and support for cyber operations. The company focuses on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring.

Sr. Principal Reverse Engineering/Vulnerability Research Engineer at Clarityinnovates | JobZoey