Senior Exploit Developer
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will reverse engineer software to identify the root cause of vulnerabilities and author original exploits for initial-access vulnerabilities when public proof-of-concept code is unavailable. You will implement network detections, such as Suricata and Snort signatures and YARA rules, and write Attack Surface Management queries to find vulnerable systems.
Requirements
- Prior experience writing exploit code for unauthenticated RCE or initial-access vulnerabilities.
- Experience working remotely on technical projects independently and in small teams.
- Ability to obtain authorization for access to technology subject to United States export-control regulations, sanctions, and other applicable requirements.
Responsibilities
- Reverse engineer software to identify the root cause of vulnerabilities.
- Author original software exploits for initial-access vulnerabilities when public proof-of-concept code is unavailable.
- Implement detections, including Suricata and Snort signatures and YARA rules, for exploitation of initial-access vulnerabilities.
- Write Attack Surface Management queries using Shodan, Census, FOFA, and ZoomEye to find vulnerable systems likely to be targeted.
Benefits
- Unlimited PTO
- 401k plan with company match
- Comprehensive healthcare coverage
- Paid parental leave
- Remote-friendly flexibility
- Cell phone and internet expense reimbursement
- Professional development, coaching, and learning resources
