Senior Vulnerability Researcher – HYBRID!

Be Challenged and Make a Difference 

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. 

Description of Task to be Performed:

AnaVation is seeking a Senior Vulnerability Researcher to proactively identify, analyze, and exploit security vulnerabilities in mobile devices, operating systems, and applications. This position requires a deep understanding of mobile device architecture, software, communication protocols, attack vectors, exploitation techniques, and mitigation strategies. The successful candidate will lead a team performing vulnerability research on mobile technologies to include iOS, Android, Linux, and other environments.

This position is currently hybrid (partially remote with up to three days per week on-site with our customer in Lorton, VA). Remote status is subject to change at the customer’s direction, but is expected to continue. There may also be several meetings throughout the year where team members will collaborate on site for 1 to 2 weeks.

This position requires an active Top Secret clearance and the ability to obtain SCI access and a CI polygraph.

Required Qualifications:

• Minimum of 6+ years of experience in vulnerability research with a focus on mobile devices, operating systems, and protocol analysis.
• Demonstrable experience in identifying and analyzing vulnerabilities in mobile operating systems (i.e., kernel, frameworks), mobile applications, and mobile device hardware/firmware.
• Expertise in mobile operating systems architectures (i.e., iOS, Android) and security mechanisms.
• Perform reverse engineering of mobile software and firmware to identify security flaws.
• Strong understanding of operating systems, network protocols and frameworks.
• Experience with programming languages (e.g., IDA Pro, Ghidra) and debugging tools (e.g., LLDB, GDB)
• Experience with programming languages to include C, C++, Java, and scripting languages such as Python.
• Strong written and verbal communication skill, with the ability to clearly articulate technical findings.
• Excellent analytical, problem-solving, and critical thinking skills.
• Ability to work independently and as part of a team.

Preferred Qualifications:

• Bachelor’s/Master’s degree in Computer Science, Information Security or related field of study (or equivalent practical experience).
• Experience with threat modeling methodologies.
• Knowledge of cryptography and its applications.

Benefits 

·        Generous cost sharing for medical insurance for the employee and dependents 

·        100% company paid dental insurance for employees and dependents 

·        100% company paid long-term and short term disability insurance 

·        100% company paid vision insurance for employees and dependents 

·        401k plan with generous match and 100% immediate vesting 

·        Competitive Pay 

·        Generous paid leave and holiday package 

·        Tuition and training reimbursement 

·        Life and AD&D Insurance

About AnaVation 

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.  

If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you! 

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.