Senior Vulnerability Researcher
Summary
Leads advanced vulnerability research on operating systems, kernels, firmware, and embedded platforms, reverse engineering binaries and designing novel exploitation techniques to improve defense and security systems.
Position Title: Senior Security Researcher
Location: St. Petersburg, FL | Melbourne, FL | San Antonio, TX
Clearance Requirement: Top Secret/SCI
Employment type: Full Time
WHAT YOU WILL BE DOING
-
Leading advanced vulnerability research efforts across operating systems, kernels, firmware, hypervisors, embedded platforms, and complex application stacks.
-
Independently scoping ambiguous or underexplored attack surfaces and driving research from initial hypothesis through validated findings.
-
Performing deep reverse engineering and in-memory analysis of compiled binaries across multiple architectures (x86/x64, ARM, PowerPC, etc.).
-
Designing and executing novel exploitation techniques and mitigation evaluations, including identifying real-world weaknesses in modern defense mechanisms.
-
Analyzing undocumented or partially documented system behavior and extending internal interfaces or tooling to support research goals.
-
Collaborating with other senior researchers to shape technical direction, review complex work, and raise the overall quality of research output.
-
Translating low-level technical findings into clear, actionable insights for internal stakeholders and, when appropriate, customers.
-
Contributing to research culture through mentorship, knowledge sharing, and improvements to tools, methodologies, and workflows.
WHAT YOU HAVE DONE
-
Conducted high-impact vulnerability research on real-world systems with minimal guidance, producing findings that influenced security decisions or mitigations.
-
Demonstrated deep understanding of operating system internals (Windows, Linux, macOS), kernel subsystems, and low-level execution models.
-
Reverse engineered complex binaries, firmware, or kernel components and reasoned about their behavior in memory.
-
Developed proof-of-concept exploits or mitigation bypasses that go beyond simple crashes and demonstrate meaningful impact.
-
Shown strong intuition for exploit mitigations such as ASLR, DEP/NX, stack canaries, CFI, and where their assumptions break down.
-
Written research tooling, scripts, or frameworks (e.g., Python, C/C++) to support analysis, exploitation, or automation.
-
Collaborated closely with other researchers, provided technical feedback, and influenced how work is approached or evaluated.
-
Communicated complex technical concepts clearly in writing and discussion, including with other experts.
EVEN BETTER
-
Experience with hypervisors, virtualization stacks, firmware boot chains, or trusted execution environments.
-
Background in embedded systems, RTOS environments, or mobile platforms (iOS/Android).
-
Familiarity with networking or wireless stacks (Wi-Fi, Bluetooth, cellular) and their security models.
-
Contributions to the vulnerability research community (publications, talks, open source).
-
Experience with symbolic execution, constraint solving, fuzzing frameworks, or advanced program analysis techniques.
-
Malware analysis experience, including deobfuscation, behavioral analysis, or adversarial tooling.
-
Interest in shaping long-term research direction, mentoring other researchers, or acting as a technical authority without moving into management.
REFERRALS
As published by lever
Which location are you applying for?, Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Portfolio URL, Other website
- Do you have any commitments or agreements to another current or former employer or entity that might restrict your employment with us (non-compete, non-disclosure, confidentiality agreement)? choose one
- What is your desired start date? optional
- What is your minimum salary expectation? optional
- I hereby affirm that the information provided on this application (and accompanying resume, if any) is true and complete to the best of my knowledge. choose one
- Were you referred to RII by a current RII employee (please write employee name below, if so)? written answer
- Do you have an active US security clearance? choose one
- FOR UK BASED ROLES ONLY: Do you have an active UK security clearance? choose one · optional
- For purposes of the following statement, “the Company” is the organization that I am applying to join through this job application. I hereby affirm that the information provided on this application (and accompanying resume, if any) is true and complete to the best of my knowledge. I also agree that falsified information or significant omissions in the application or in the application process may disqualify me from further consideration for employment and may be considered justification for dismissal if discovered at a later date. I authorize all persons listed above (and on the accompanying resume, if any) to give the Company any and all information concerning my previous employment and education and any pertinent information they may have, personal or otherwise, and release all parties, such persons and the Company, from liability for any damages that may result from furnishing same to the Company. I understand that the Company will provide workers’ compensation insurance coverage for its employees. In the event of an injury in the workplace, I agree that my sole remedy lies in coverage under the Company’s workers’ compensation insurance policy. If employed by the Company, I agree to abide by the policies and procedures of the Company, which include the Company’s Anti- Harassment Policy. I further understand that my employment can be terminated, with or without cause or notice, at any time, at the discretion of the Company or myself. I further understand that no manager or representative of the Company other than the President of the Company has any authority to enter into any agreement, oral or written, on behalf of the Company for a term of employment or to make any assurance or promise of continued employment. I understand that the Company may obtain a consumer and/or investigative consumer report for employment purposes that may include information regarding prior employment, work experience and performance, reasons for employment termination, and information as to character, general reputation, personal characteristics, or mode of living. The report may also contain a record’s check of driving, criminal, credit, education, degrees, professional licenses and/or certification records depending on the position. By signing this application, I authorize the procurement of a consumer and/or investigative consumer report by the Company as part of the pre-employment background investigation and if hired, at any time during my employment. Maryland Applicants: Maryland Job Applicant Fairness Act restricts the use of an applicant/employee’s credit report or credit history for employment purposes unless specified conditions are met. Employers are prohibited from using an applicant’s or employee’s credit report to: deny employment to an applicant; discharge an employee; or determine compensation or the terms, conditions or privileges of employment. UNDER MARYLAND LAW, AN EMPLOYER MAY NOT REQUIRE OR DEMAND, AS A CONDITION OF EMPLOYMENT, PROSPECTIVE EMPLOYMENT, OR CONTINUED EMPLOYMENT, THAT AN INDIVIDUAL SUBMIT TO OR TAKE A LIE DETECTOR OR SIMILAR TEST. AN EMPLOYER WHO VIOLATES THIS LAW IS GUILTY OF A MISDEMEANOR AND SUBJECT TO A FINE NOT EXCEEDING $100. California Applicants: Employers (with the exception of certain financial institutions) are prohibited from obtaining or relying on credit reports for applicants and employees, unless the report is sought in relation to (1) a position in the California Department of Justice; (2) a managerial position (defined as a position that qualifies for the executive exemption from overtime); (3) a sworn peace officer or other law enforcement position; (4) a position for which credit information is required by law to be disclosed or obtained; (5) a position that involves regular access (other than in connection with routine solicitation of credit card applications in a retail establishment) to people’s bank or credit card account information, social security number, and date of birth; (6) a position in which the employee would be a named signatory on the employer’s bank or credit card account, authorized to transfer money on behalf of the employer, or authorized to enter into financial contracts on behalf of the employer; (7) a position that involves regular access to cash totaling $10,000 or more of the employer, a customer, or client during the workday; and (8) a position that involves access to confidential or proprietary information (defined as a legal “trade secret” under Civil Code 3426.1(d)). Even if the employer is permitted to obtain a credit report under one of the exceptions outlined above, the employer must first provide written notice to the applicant or employee, specifying the permissible basis for requesting the report and providing a box for the employee/applicant to check off to request a copy of the report, which must be provided free of charge and at the same time the employer receives its copy of the report. If employment is denied based on information in a credit report, the employer must advise the applicant/employee and provide the name and address of the credit reporting agency that supplied the report. California Applicants: I further understand that the Company may obtain Public Records about me as part of an internal background investigation and that I may waive my rights to receive a copy of such Public Records by checking this box: □ UNDER CONNECTICUT LAW, AN EMPLOYER MAY NOT REQUIRE CONSENT OF CURRENT OR PROSPECTIVE EMPLOYEES TO REQUEST A CREDIT REPORT THAT CONTAINS INFORMATION ABOUT CREDIT SCORES, CREDIT ACCOUNT BALANCE, PAYMENT HISTORY OR CHECKING ACCOUNT BALANCES OR ACCOUNT NUMBERS AS A CONDITION OF EMPLOYM ENT. New York Applicants: Candidates seeking employment in New York City should not list salaries with previous employers, unless they elect to do so voluntarily. Illinois Applicants are not obligated to disclose expunged Juvenile records of adjudication or arrest. I understand and agree that I may be required to take a drug and alcohol screening test. I hereby give my voluntary consent for a blood and/or urine sample to be collected from me and submitted for testing. I also consent to the release of the test results to the Company for its use. I understand that any positive drug or alcohol result may preclude my employment. I understand that if I am offered employment by the Company, I will be required to sign an Arbitration Agreement that governs any disputes I may have with the Company. choose one