Senior Exploit Developer
Role details
Job location
Tech stack
Job description
Our client is seeking a Senior Exploit Developer in Fort Belvoir, VA. to design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission-assurance decisions.
Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling. Test and harden payloads to minimize detection by EDR/AV. Integrate exploits into operational toolchains and assist operators during live assessments. Produce technical annexes and concise executive/technical briefings.
Requirements
Active TS/SCI (U.S. citizen) Proficient in C/C++, assembly, and Windows internals (kernel & Win32 APIs). Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations). Ability to pass the DCART Senior Developer Aptitude Test (SDAT).
Desired
Experience with C2 frameworks; Cobalt Strike experience is a plus (nice-to-have, not mandatory). OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds. Experience building operational-grade implants and delivery pipelines.