Principal Reverse Engineering/Vulnerability Research Engineer

The role

You will identify weaknesses in various systems, document and demonstrate vulnerabilities, and develop strategies to exploit them. You will collaborate with a team of Security Researchers to dissect and comprehend the functionality of multiple systems.

What you will do

• Perform vulnerability research and reverse engineering for customer tasks
• Conduct advanced static and dynamic analysis using tools like disassemblers, debuggers, emulators, tracers, and fuzzers
• Develop reliable proof-of-concept and operational exploit capabilities leveraging discovered vulnerabilities
• Research and bypass modern exploit mitigation and security mechanisms
• Build internal tools, automation, and research infrastructure to enhance vulnerability discovery and analysis processes
• Perform root-cause analysis on vulnerabilities and communicate findings effectively to technical and non-technical stakeholders
• Communicate security research findings internally and externally, as appropriate
• Mentor fellow security researchers and lead small to medium-sized teams through the full project lifecycle

Required qualifications

• Extensive experience in static and dynamic analysis and reverse engineering
• Familiarity with multiple classes of vulnerabilities and exploit techniques
• Proficiency in using analysis tools such as disassemblers, debuggers, and fuzzers
• Strong communication skills for diverse audiences, including technical and non-technical partners
• Experience leading research projects and managing small to medium-sized teams
• Ability to develop proof-of-concept exploits for discovered vulnerabilities
• Experience with bypassing modern security mechanisms and mitigations

Benefits

• Performance-based bonuses
• Extensive medical, dental, and vision coverage
• 401(k) plan with company match
• Substantial paid time off and holidays
• Flexible work arrangements where possible
• Income protection benefits

About the company

Clarity Innovations is a national security partner that delivers solutions to the Intelligence Community (IC) and Department of Defense (DoD). Their platform modernizes data operations using advanced workflows and secure DevSecOps practices.