Senior Exploit Developer

This is a fully remote position, open to applicants in Maryland, +2 more states.

📋 Description

• Analyze software through reverse engineering to identify the root cause of vulnerabilities (RCA).

• Create original software exploits for initial access vulnerabilities, especially when there is little or no publicly available proof-of-concept code.

• Implement detection mechanisms such as Suricata and Snort signatures, along with YARA rules, to identify exploited initial access vulnerabilities in network traffic.

• Develop Attack Surface Management (ASM) queries utilizing Shodan, Census, FOFA, and ZoomEye to locate vulnerable systems that may be potential targets.

• Collaborate with an experienced team of hackers and threat researchers.

• Contribute to the go-exploit open-source framework.

• Conduct research and create tools aimed at automating and enhancing vulnerability enrichment and mapping.

⛳️ Requirements

• Prior experience in writing exploit code for remote code execution (RCE) or initial access vulnerabilities that do not require authentication for exploitation.

• Experience working on technical projects remotely, independently, and within small teams.

• Previous experience in Cybersecurity (preferably at a vendor or in Government).

• Ability to provide examples of exploit code created (preferred).

• Employment is contingent upon the company's capability to authorize access in accordance with applicable U.S. export control, sanctions, and other relevant legal or contractual requirements.

🏝️ Benefits

• Unlimited PTO.

• 401k plan with company match.

• Comprehensive healthcare coverage.

• Generous paid parental leave.

• Remote-friendly environment with flexible working arrangements.

• Expense reimbursement for cell phone and internet costs.

• Continuous professional development, coaching, and access to learning resources.

• Opportunities for career progression within a rapidly growing team.