
Windows Security Researcher 3
- Annapolis Junction, MD
- $125,000-183,000 per year
- Permanent
- Full-time
- Perform security research against Windows technologies.
- Demonstrate the latest techniques and best practices in vulnerability research and demonstrate the ability to follow best practices.
- Produce detailed documentation of research.
- Write code in C, Python, and Assembly to demonstrate ability to control the flaws.
- Understanding of Windows Kernel and device drivers
- Experience reading and writing assembly (x86/x64)
- Extensive experience with debuggers (WinDBG, etc.)
- Strong C, Python, and ASM development experience
- Working as a team with researchers and developers
- Labor Category Requirements - Software Developer 3
- Minimum eight (8) years of experience programming with object-oriented programming languages
- Minimum five (5) years of experience developing Windows applications using Visual Studio or .NET environments OR minimum five (5) years of experience developing UNIX applications using make files or comparable build environments
- Experience developing complex programs using, C, C#, C++, Java, or other comparable languages
- Minimum three (3) leading projects that develop complex software, ensuring a collaborative environment, and configuration management, and Experience implementing software life cycle management (requirements, design, develop, test, validate, deploy)
- Labor Category Requirements - CNO Analyst/Programmer 3
- Bachelor's degree and six (6) years of experience OR minimum ten (10) years of experience in computer science, information systems, or network engineering
- Minimum eight (8) years of experience programming in Assembly, C, C++, Java, Perl, or Python
- Minimum seven (7) years of experience developing in one (1) or more of the following:
- Windows applications using Visual Studio or .NET environments
- UNIX applications using make files or comparable build environments
- Minimum six (6) years of experience with programming CNO tools and techniques
- Minimum five (5) years of experience managing and supervising teams in support of the Government CNO capability development
- Minimum five (5) years of experience with programming CNO tools for the US Government
- Minimum four (4) years of experience in programming techniques to evade host and or network-based intrusion detection systems
- Minimum four (4) years of experience in network sockets programming, developing packet-level programs: expert packet-level understanding of IP, TCP, and application-level protocols
- Expert ability in UNIX kernel internals and low-level Windows internals:
- OS runtime linker/loader
- Object file formats (e.g., PE, COFF, ELF)
- File system internals (e.g., NTFS, ext2, btrfs)
- OS-specific mandatory and discretionary access control mechanisms
- Process and thread APIs and data structures.