Vulnerability Researcher (SS-C-2/3)
- Job Title
- Vulnerability Researcher (SS-C-2/3)
- Job ID
- Annapolis Junction, MD
- Other Location
Legato, LLC recruiters (Staffing@legatocorp.com) would love to speak with you regarding the following position: Vulnerability Researcher in Annapolis Junction and Laurel, MD.
Security Clearance Required: TS/SCI w/ Polygraph
What You Will Do:
This is a project focused on R&D and prototyping of new CNO capabilities for the Maryland customer. The work involves Vulnerability Research, Exploit Development, CNO tool development and enhancement, and infrastructure support (DevOps) for access operations. Platforms involved include iOS, Android, MacOS, Linux, Windows, and other environments. This is some of the most impactful work in the Intelligence Community, with the new capabilities developed by this team getting rapidly deployed and into the hands of users. One of the best things about this project is the customer. They give Engineers huge latitude in choosing programming languages and technologies, and they encourage exploration of new tech. The focus here is RESULTS, not which methods are followed to achieve them, so creativity and flexibility are part of the culture. There is almost no distinction here between blue-badgers and green-badgers: the team is nicely integrated, the people are nice and highly competent, and the Branch and Section Leads do an excellent job of shielding the engineers from any organizational politics. The customer also understands that Engineers are human beings that each have unique needs. Flexibility for working hours is common: work hours are generally whatever you like between 6am and 6pm, with some people working fewer than 5 days a week, and others regularly flexing their time across multiple weeks.
You will be working independently as a Vulnerability Researcher to identify flaws in software. You should be familiar with the latest techniques in vulnerability research and demonstrate their ability to follow best practices. Individual must be extremely detail oriented when documenting their research.
Our minimum requirements for this role:
- Understanding of OS Internals (any major OS)
- Experience reading and writing assembly (x86/x64, ARM, MIPS, etc.)
- Experience with debuggers (WinDBG, GDB, ADB, BDI, etc.)
- Experience with dynamic and static binary analysis, fuzzing techniques, SMT solvers, and/or source code auditing
- C, Python, and ASM development experience
- Demonstrated ability to self-drive research tasking
- Motivated to learn complex systems
- Minimum of six (6) years’ experience in programs and contracts of similar scope, type and complexity is required
- Bachelor’s in related discipline or equivalent experience
Legato, LLC is a dynamic small business headquartered in Columbia, near Ft. Meade, MD. Our positions include Cyber, Software, Systems, Networking, Data Science and other complex engineering capabilities. We set ourselves apart by having employees in the top of their field and who enjoy working at Legato for its attention to its employees, aggressive compensation, and benefits package and upward mobility possibilities.
Legato LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, or disability status.