Vulnerability Researcher

About the Organization
Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.

About the Role
Redhorse transforms the way government uses data and technology. To support this mission, we are seeking a self-motivated Senior Vulnerability Researcher who is ready to solve some of the most challenging technical problems in a fast-paced environment supporting national security.
In this role, you will apply advanced vulnerability research (VR), reverse engineering (RE), and vulnerability exploitation (VE) skills to support a variety of defensive and offensive cyber requirements. As a senior member of our team, you will perform high-impact research with minimal guidance and have the opportunity to mentor junior personnel, directly influencing the technical direction of critical mission objectives.

The salary range provided for this position represents the anticipated base salary for successful candidates. Actual compensation will be determined based on a variety of factors, including relevant experience, education, certifications, skills, security clearance level, geographic location, market conditions, and internal equity. In addition to base salary, eligible employees may participate in Redhorse's comprehensive benefits programs and may be eligible for performance-based or other incentive compensation, where applicable.

Redhorse Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition at [email protected]

Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs. This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.

• Apply a variety of VR techniques—including fuzzing, reverse engineering, and experimentation—to identify vulnerabilities and determine exploitability.

• Develop proof-of-concept software and functional prototypes to meet diverse customer requirements.

• Manage customer expectations by implementing proactive feedback mechanisms and iterative reporting.

• Prepare and deliver concise technical presentations summarizing research findings for stakeholders.

• Collaborate with internal and external stakeholders to align research with operational needs.

• Shape Capability (CA) requirements to ensure technical solutions meet broader operational goals.

• Synthesize creative technical solutions from complex operational and technical information.

• Identify and communicate operational requirements to ensure mission success.

• Perform vulnerability assessments of secure technologies to determine if protected or inaccessible information is recoverable.
• 7+ years of experience in vulnerability research.

• Active TS/SCI security clearance.

• 7+ years of expertise in programming within contemporary Windows and Linux/Unix software development environments.

• 7+ years of experience in multiple languages including C, C++, Java, and JavaScript.

• 7+ years of experience using reverse engineering tools such as IDA Pro, OllyDbg, and Windbg.

• Strong written and oral communication skills, with the ability to explain complex technical concepts to non-technical audiences.

• Static and dynamic malware analysis experience for mobile platforms, specifically iOS and Android.