Vulnerability/Malware Researcher (Reverse Engineer)

Location: Arlington, VA

We are seeking a highly skilled Vulnerability/Malware Researcher (Reverse Engineer) to identify, analyze, and understand complex software vulnerabilities and malicious code that may impact organizational systems, products, and infrastructure. This role will conduct in-depth malware analysis, reverse engineer software and firmware, uncover exploitable weaknesses, and provide actionable intelligence to support detection, response, and remediation efforts.

The ideal candidate possesses strong low-level programming knowledge, reverse engineering expertise, and experience analyzing sophisticated malware, exploit techniques, and advanced adversary tradecraft.

Key Responsibilities

Malware Analysis & Reverse Engineering

• Perform static and dynamic analysis of malicious software, including ransomware, trojans, rootkits, spyware, and advanced persistent threat (APT) malware.

• Reverse engineer malware samples to identify functionality, persistence mechanisms, command-and-control (C2) communications, and attacker objectives.

• Develop detailed malware analysis reports and technical documentation.

• Research evolving malware techniques and adversary capabilities.

Vulnerability Research

• Identify and analyze software, operating system, firmware, and application vulnerabilities.

• Perform code analysis to discover security weaknesses and exploit paths.

• Research emerging vulnerabilities and assess organizational exposure.

• Validate security findings through proof-of-concept testing and exploit analysis.

• Collaborate with remediation teams to prioritize and mitigate identified risks.

Security Research & Threat Analysis

• Investigate adversary tactics, techniques, and procedures (TTPs).

• Analyze exploit kits, attack frameworks, and intrusion methods used by threat actors.

• Support intelligence-driven security initiatives through technical research and threat assessments.

• Correlate research findings with threat intelligence and incident response investigations.

Detection Development

• Create and maintain Indicators of Compromise (IOCs), YARA rules, Sigma rules, and detection signatures.

• Develop behavioral detections and analytic content for Security Operations Center (SOC) use.

• Assist threat hunting teams by providing technical indicators and adversary insights.

• Enhance detection coverage based on research findings and threat trends.

Research Tool Development

• Develop custom scripts, automation tools, and utilities to support malware analysis and vulnerability research.

• Improve reverse engineering workflows through automation and tooling enhancements.

• Maintain secure malware analysis laboratories and research environments.

• Evaluate emerging security research technologies and platforms.

Collaboration & Reporting

• Partner with Incident Response, Threat Intelligence, SOC, Product Security, and Engineering teams.

• Present technical findings to security leadership and engineering stakeholders.

• Produce technical reports, white papers, and research briefings.

• Contribute to internal knowledge bases and security best practices.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical field, or equivalent experience.

• 3-8 years of experience in malware analysis, reverse engineering, vulnerability research, or offensive security.

• Strong understanding of operating system internals, including Windows and Linux.

• Experience reverse engineering compiled software using industry-standard tools.

• Knowledge of assembly language (x86, x64, ARM) and executable file formats.

• Proficiency in at least one programming language such as Python, C, C++, Rust, or Go.

• Experience analyzing malware behavior through static and dynamic analysis techniques.

• Understanding of software exploitation concepts, memory corruption vulnerabilities, and attack methodologies.

• Strong analytical, problem-solving, and investigative skills.

Preferred Qualifications

• Experience researching zero-day vulnerabilities or advanced exploitation techniques.

• Knowledge of cloud platforms including Azure, AWS, and Google Cloud.

• Experience with mobile application, embedded system, or firmware analysis.

• Familiarity with nation-state threat actor methodologies and advanced cyber campaigns.

• Experience supporting government, defense, intelligence community, or critical infrastructure environments.

• Understanding of exploit development methodologies.