Vulnerability Research and Exploit Developer

## Vulnerability Research and Exploit Developer Fort Meade, MD, US

Job Title:

Vulnerability Research and Exploit Developer Job Category:
Engineering Time Type:
Full time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type:
Regular Percentage of

Travel Required:

Up to 10%
Type of Travel:
Local *
* **
* The Opportunity:

** As a Vulnerability Research and Exploit Developer (VRED) at CACI, you will play a crucial role supporting DoD and IA/IC requirements analyzing and exploiting mobile and network devices. You will be responsible for identifying and exploiting security weaknesses in complex systems while working closely with interagency partners within an interagency facility.

Your role will involve seamless integration with Joint Cyber Operations Group (JCOG) personnel to ensure non-disruptive mission execution. This position demands strong analytical and problem-solving skills, excellent written and verbal communication skills, and the ability to thrive in a fast-paced, dynamic environment. The successful candidate will attain and maintain a Polygraph and Top Secret/SCI (TS/SCI) security clearance.
* Flexibility in salary based on subject matter expertise.
** Responsibilities:*
* · Conduct in-depth vulnerability research and exploit development for mobile and network devices.
· Identify and analyze security weaknesses in complex systems, providing actionable insights and solutions.
· Experience applying artificial intelligence models and AI-assisted workflows to accelerate vulnerability discovery and exploit development (e.g., LLM-assisted code analysis, reverse engineering, and triage).
· Collaborate effectively with interagency partners and JCOG personnel to support mission objectives.
· Develop and maintain tools and scripts for automated vulnerability detection and exploitation.
· Ensure seamless integration of developed solutions into existing systems without disrupting ongoing operations.
· Provide technical guidance and support to team members, fostering a collaborative work environment.
· Maintain detailed documentation of research findings, exploit development processes, and solution implementations.
· Stay current with cybersecurity/VR/exploit development.
*
* Qualifications:

**
* Required:

* · Current Top Secret/SCI (TS/SCI) security clearance with polygraph.
· Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field, with a minimum of five years of relevant experience; or equivalent combination of education and experience.
· Proven track record of identifying and exploiting security weaknesses in mobile and network devices.
· Strong proficiency in programming languages such as C/C++, Python, and assembly (ARM/x86).
· Experience with exploit development techniques, reverse engineering, and vulnerability assessment tools and frameworks (e.g., IDA Pro, Ghidra, Binary Ninja, Frida, GDB/LLDB, QEMU).
· Excellent written and verbal communication skills.
· Ability to work independently with minimal oversight and function effectively within a team.
* Desired:
* · Master's degree in a related field.
· Certifications such as OSCP (Offensive Security Certified Professional), OSED/OSEE (Offensive Security exploit development certifications), GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), and GREM (GIAC Reverse Engineering Malware).
· Experience building fuzzing harnesses (e.g., AFL++, lib Fuzzer, honggfuzz) and triaging the resulting crashes to root cause.
· Deep understanding of memory-corruption vulnerability classes (stack/heap overflow, use-after-free, type confusion) and techniques for bypassing modern exploit mitigations (ASLR, DEP/NX, stack canaries, CFI/CFG, PAC, application sandboxing).
· Proficiency in reverse engineering closed-source…