Vulnerability Research Engineer – Mid-Level

Vulnerability Research Engineer – Mid-Level

Location: Northern Virginia
Travel: None
Clearance: Minimum active Top Secret/Active TS/SCI with Polygraph preferred (or willingness to obtain)
Citizenship: US Citizenship required

Grimm is an innovative, forward-looking cybersecurity organization focused on solving complex technical challenges across hardware, firmware, and software systems. Our teams specialize in reverse engineering, vulnerability research, and security engineering, supporting mission-critical efforts across national security, defense, and critical infrastructure sectors.

Our work is rooted in real-world operational experience identifying advanced threats, uncovering critical vulnerabilities, and developing meaningful solutions to complex problems. Grimm engineers operate across embedded systems, vehicles, IoT, and enterprise technologies, with a focus on understanding systems deeply and demonstrating real-world impact.

We are a highly technical and hands-on organization. Our engineers and researchers specialize in breaking systems, discovering vulnerabilities, and improving resilience—working directly with real hardware and software to understand how systems function and how they fail.

Grimm is seeking a Mid-Level Vulnerability Research Engineer to support mission-focused offensive cyber and vulnerability research efforts.

This role is centered on vulnerability research, reverse engineering, exploit development, and low-level software analysis across modern operating systems and platforms. You’ll work directly with software systems, embedded technologies, browsers, operating systems, and adversary technologies to identify vulnerabilities and develop technical capabilities in support of national security missions.

We’re looking for individuals who are deeply curious, technically driven, and enjoy working at the lowest levels of systems—people who are passionate about understanding how systems function internally and how they can be analyzed, manipulated, or exploited.

• Conduct vulnerability research against modern software and embedded platforms
• Perform reverse engineering and low-level analysis of binaries and source code
• Research and exploit vulnerabilities in adversary technologies
• Develop offensive software capabilities and supporting tooling
• Support capability integration, testing, and lifecycle maintenance activities
• Conduct technology research and vulnerability assessments
• Develop algorithms and software utilities supporting mission requirements
• Analyze low-level operating system behavior across multiple platforms
• Support software integration and full system testing activities
• Develop technical documentation and communicate technical findings clearly
• Collaborate with cross-functional engineering and research teams

• Minimum 5+ years of relevant hands-on experience in vulnerability research, reverse engineering, exploit development, or offensive cyber operations
• Strong JavaScript development experience
• Experience with ARM / AARCH
  64 assembly development and C programming
• Understanding of exploit mitigations such as:
  • ASLR
  • DEP
  • PXN
  • ROP
• Knowledge of:
  • V8
  • JIT
  • Web Kit
• Low-level operating systems experience with one or more of the following:
  • Android
  • iOS
  • Windows
  • macOS
  • Linux
• Proficiency with reverse engineering tools such as:
  • IDA Pro
  • Binary Ninja
  • Ghidra
• Experience with networking development and protocol analysis
• Demonstrated experience with:
  • Software integration and testing
  • Technical writing and documentation
  • Lifecycle maintenance of software programs
• Proven experience writing scripts and software utilities
• Must be a US Citizen

• Expertise in vulnerability research and offensive capability development
• Experience supporting:
  • Government contracting
  • DoD programs
  • Intelligence Community customers
• Proposal development experience
• Active TS/SCI clearance with Polygraph
• Experience managing multiple classified interdisciplinary efforts concurrently
• Leadership experience supporting:
  • Military operations
  • Defense acquisition programs
• Strong verbal and written communication skills, including presenting technical analysis to senior government leadership
• Experience testing…