Back to jobs

Vulnerability & Exploitation Specialist

Annapolis Junction, Maryland, United States

What Impact You’ll Have:

Our team conducts Vulnerability Research and Reverse Engineering in a rapid prototyping, R&D environment. On this highly-visible program, you can get your hands dirty with a wide variety of tools and systems and get a chance to do some of the really cool things that can be done with a CNO skill set. The project consists of small teams working closely with customers to respond to specific mission needs, create new tools and techniques, and address ongoing challenges. This work is very hands-on, and the culture supports developing talent and letting smart people grow and tackle real-world challenges in a flexible, fun environment. On this project you could work with C/C++, Python, Assembly (x86/x64), Java, mobile OS's, windows, linux, RE and debugging tools, and more. Work on this program takes place in both customer and contractors SCIFs in the Annapolis Junction, MD area (we cannot support remote work) and requires a TS/SCI + Poly clearance (acceptable to this customer).

What You’ll Be Owning:

GRVTY is seeking a Vulnerability & Exploitation Specialist with a TS/SCI + Poly clearance (applicable to this customer) to join one of our top projects in Annapolis Junction, MD. We are looking for candidates who have discovered a 0-day vulnerabilities or a list of CVEs (public vulnerability disclosures) they discovered or contributed to. We are also looking for any specific work they’ve done exploiting vulnerabilities.

What You Must Have:

  • Active TS/SCI with Polygraph Clearance
  • Skills/experience listed out in order of priority:
  • 0-day vulnerabilities or CVEs discovered and attributed to themselves
  • History performing vulnerability research
  • Experience with writing or using fuzzers – AFL, LibFuzzer, ClusterFuzz, oss-fuzz
  • Experience with code analysis tools – CodeQL, Joern, Semgrep
  • History of exploiting or productizing 0-day vulnerabilities
  • History of exploiting or productizing n-day vulnerabilities/CVEs/publicly disclosed vulnerabilities
  • History of reverse engineering malware or other code for CNE purposes
  • Experience with reverse engineering tools – Ghidra, Ida Pro, Binary Ninja Experience using debuggers – GDB or WinDbg
  • Experience writing, navigating, and building C/C++ code
  • Experience with tools like VsCode, Visual Studio, VIM/Emacs
  • Familiarity with ARM or MIPS architectures and Linux variants
  • We also use Python to write a lot of our tools, so that is good to see 

Pay Range: At GRVTY, we understand that compensation is influenced by many factors—such as geographic location, federal contract labor categories, wage rates, prior experience, skillsets, education, and certifications.
We’re proud to offer a work environment that empowers our team to achieve a strong work-life balance. GRVTY provides competitive pay, comprehensive benefits, and meaningful opportunities for professional growth.
Our benefits package is designed to support the well-being of our employees and their families, and includes coverage in areas such as healthcare, financial wellness, retirement planning, family assistance, continued education, and paid time off.

Pay Range

$180,000 - $230,000 USD

Why Choose GRVTY

The toughest national security challenges demand vision and ingenuity, not just resources. We deliver mission and technical expertise to outpace our adversaries. We’re purpose-built to tackle the most entrenched, systemic national security issues around the world.

We partner with our customers to help them overcome challenges in every corner of technology and defense—including the ones still being explored. Our growing capabilities create complementary advantages, giving on-the-ground operations the edge they need to succeed. We muster everything we have to answer every challenge presented, every day of our lives.

At GRVTY, we believe that when our employees thrive, our company thrives. That’s why we offer a comprehensive and competitive benefits package designed to support your well-being, growth, and work-life balance.

•    Robust health plan including medical, dental, and vision  

•    Health Savings Account with company contribution  

•    Annual Paid Time Off and Paid Holidays  

•    Paid Parental Leave   

•    401k with generous company match  

•    Training and Development Opportunities  

•    Award Programs  

•    Variety of Company Sponsored Events

 

EEO Statement

GRVTY, is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran and will not be discriminated against on the basis of disability. 

Anyone requiring reasonable accommodations should email recruiting@grvty.com or call 703-544-7930 with requested details.  A member of the HR team will respond to your request within 2 business days. 

Know Your Rights: Workplace Discrimination is Illegal (eeoc.gov)  

Please review our current job openings and apply for the positions you believe may be a fit. If you are not an immediate fit, we will also keep your resume in our database for future opportunities.

 

 

Create a Job Alert

Interested in building your career at GRVTY? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...

Are you authorized to work in the United States for any employer? *

Select...

Will you now or in the future require visa sponsorship?

Select...

U.S. citizenship is a basic security clearance eligibility requirement. As outlined in Executive Order 12968, Access to Classified Information, eligibility for access to classified information may only be granted to employees who are United States citizens.

We are unable to sponsor candidates for a U.S. Security Clearance. If you are applying for a position that requires a U.S. Security Clearance, please provide the level of U.S. Security Clearance that you have today.

I understand that GRVTY is an "at-will" employer, meaning that my employment has no specified term and that the employment relationship may be terminated any time at the will of either party on notice to the other. By signing above, I certify that all the information on this application is accurate to the best of my knowledge, and that I understand that intentional misrepresentation of any information may invalidate this application and may result in termination of subsequent employment with GRVTY. GRVTY reserves the right to conduct background investigations, contact references and verify information provided on the application and/or resume.

By typing my name above, I give my consent and authorization for GRVTY and its designated employees and consultants to collect and use the information I submit in considering me for job opportunities at GRVTY.

By typing my name above, I certify and affirm that the information provided by me during interviews, on this application and all other related documents to be true in all respects and I further understand that any misrepresentation or omission will be grounds for immediate termination from further consideration or possible employment. I understand that neither the completion of this application nor any other part of my consideration for employment establishes any obligation for GRVTY to hire me. If I am hired, I understand that either GRVTY or I can terminate my employment at any time and for any reason, with or without cause and without prior notice. I understand that no representative of GRVTY has the authority to make any assurance to the contrary. I understand and agree that that any and all claims or disputes that I may have with GRVTY, arising out of or related to my application for employment, any employment, or any separation from employment, will be resolved exclusively by final and binding arbitration. This provision shall be construed as broadly as possible and any claims which I may have against the company arising from the employment relationship, including discrimination claims under Title VII, the Age Discrimination in Employment Act, Americans with Disabilities Act, or any other federal, state or local law prohibiting discrimination, claims under the Fair Labor Standards Act, claims based upon contract or tort, claims arising out of my employment which I may assert against individuals, and all questions of arbitrability, shall be conclusively decided by the arbitrator. Arbitration proceedings shall be conducted in accordance with the Rules of the American Arbitration Association. I understand that my agreement to binding arbitration is an express condition precedent to my employment with GRVTY. Should I be extended an offer of employment, my acceptance of such an offer will reaffirm my agreement to final and binding arbitration for the resolution of any and all claims. This is a written agreement to arbitrate, binding upon me as well as GRVTY, and it shall be enforceable pursuant to the provisions of the Federal Arbitration Act, and the Virginia Uniform Arbitration Act. If this application leads to employment, I understand that false or misleading information in my application or interview may result in my release.

What is your desired salary range? Feel free to note if your expectations are flexible or negotiable.

Select...

Please provide your current mailing address. This information will be kept confidential and used for employment-related purposes only.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in GRVTY’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.