The Darkstar Group
Vulnerability & Exploitation Specialist (TS/SCI + Poly)
The Darkstar Group, Baltimore, Maryland, United States
Overview
The DarkStar Group, a GRVTY Company, is seeking a Vulnerability & Exploitation Specialist with a TS/SCI + Poly clearance (applicable to this customer) to join one of our top projects in Annapolis Junction, MD. The project involves vulnerability research and reverse engineering in a rapid prototyping, R&D environment. This highly-visible program requires hands-on work with a range of tools and systems, and the team collaborates closely with customers to respond to mission needs, create new tools and techniques, and address ongoing challenges. Work may involve C/C++, Python, Assembly (x86/x64), Java, mobile OS, Windows, Linux, reverse engineering, and debugging tools, among others. Work takes place in customer and contractor SCIFs in the Annapolis Junction, MD area and requires a TS/SCI + Poly clearance (acceptable to this customer). Responsibilities
Contribute to vulnerability research, reverse engineering, and exploiting vulnerabilities where applicable. Engage in discovery and disclosure of 0-day vulnerabilities or CVEs, and document contributions. Utilize fuzzers (e.g., AFL, LibFuzzer, ClusterFuzz, oss-fuzz) and perform code analysis (CodeQL, Joern, Semgrep). Reverse engineer malware or other code for CNE purposes; build and productize vulnerabilities. Work with reverse engineering tools (Ghidra, Ida Pro, Binary Ninja) and debuggers (GDB, WinDbg); develop and navigate C/C++ projects. Collaborate with team using Python for tool development; operate within Linux variants and ARM/MIPS architectures. Qualifications
0-day vulnerabilities or CVEs discovered and attributed to the candidate History performing vulnerability research Experience with fuzzers and code analysis tools (as listed above) Experience in exploiting or productizing 0-day and n-day vulnerabilities/CVEs/public disclosures Experience reverse engineering malware or code for CNE purposes Proficiency with reverse engineering tools (Ghidra, Ida Pro, Binary Ninja) Experience using debuggers (GDB, WinDbg) Experience writing, navigating, and building C/C++ code Experience with IDEs and editors (VsCode, Visual Studio, VIM/Emacs) Familiarity with ARM or MIPS architectures and Linux variants Python experience for tool development Benefits
Robust health plan including medical, dental, and vision Health Savings Account with company contribution Annual Paid Time Off and Paid Holidays Paid Parental Leave 401k with generous company match Training and Development Opportunities Award Programs Variety of Company Sponsored Events The DarkStar Group, a GRVTY Company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran and will not be discriminated against on the basis of disability. Anyone requiring reasonable accommodations should email ds_recruiting@grvty.com or call 703-544-7930 with requested details. A member of the HR team will respond to your request within 2 business days. Know Your Rights: Workplace Discrimination is Illegal
#J-18808-Ljbffr
The DarkStar Group, a GRVTY Company, is seeking a Vulnerability & Exploitation Specialist with a TS/SCI + Poly clearance (applicable to this customer) to join one of our top projects in Annapolis Junction, MD. The project involves vulnerability research and reverse engineering in a rapid prototyping, R&D environment. This highly-visible program requires hands-on work with a range of tools and systems, and the team collaborates closely with customers to respond to mission needs, create new tools and techniques, and address ongoing challenges. Work may involve C/C++, Python, Assembly (x86/x64), Java, mobile OS, Windows, Linux, reverse engineering, and debugging tools, among others. Work takes place in customer and contractor SCIFs in the Annapolis Junction, MD area and requires a TS/SCI + Poly clearance (acceptable to this customer). Responsibilities
Contribute to vulnerability research, reverse engineering, and exploiting vulnerabilities where applicable. Engage in discovery and disclosure of 0-day vulnerabilities or CVEs, and document contributions. Utilize fuzzers (e.g., AFL, LibFuzzer, ClusterFuzz, oss-fuzz) and perform code analysis (CodeQL, Joern, Semgrep). Reverse engineer malware or other code for CNE purposes; build and productize vulnerabilities. Work with reverse engineering tools (Ghidra, Ida Pro, Binary Ninja) and debuggers (GDB, WinDbg); develop and navigate C/C++ projects. Collaborate with team using Python for tool development; operate within Linux variants and ARM/MIPS architectures. Qualifications
0-day vulnerabilities or CVEs discovered and attributed to the candidate History performing vulnerability research Experience with fuzzers and code analysis tools (as listed above) Experience in exploiting or productizing 0-day and n-day vulnerabilities/CVEs/public disclosures Experience reverse engineering malware or code for CNE purposes Proficiency with reverse engineering tools (Ghidra, Ida Pro, Binary Ninja) Experience using debuggers (GDB, WinDbg) Experience writing, navigating, and building C/C++ code Experience with IDEs and editors (VsCode, Visual Studio, VIM/Emacs) Familiarity with ARM or MIPS architectures and Linux variants Python experience for tool development Benefits
Robust health plan including medical, dental, and vision Health Savings Account with company contribution Annual Paid Time Off and Paid Holidays Paid Parental Leave 401k with generous company match Training and Development Opportunities Award Programs Variety of Company Sponsored Events The DarkStar Group, a GRVTY Company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran and will not be discriminated against on the basis of disability. Anyone requiring reasonable accommodations should email ds_recruiting@grvty.com or call 703-544-7930 with requested details. A member of the HR team will respond to your request within 2 business days. Know Your Rights: Workplace Discrimination is Illegal
#J-18808-Ljbffr