> Markdown version of [/jobs/ext/2581621-vulnerability-researcher-for-embedded-devices](https://www.wearedevelopers.com/jobs/ext/2581621-vulnerability-researcher-for-embedded-devices). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Vulnerability Researcher for Embedded Devices

- **Company:** Rhysen Workforce Solutions LLC
- **Location:** Arlington, VA, United States
- **Contract:** Permanent contract
- **Skills:** X86-64, Assembly Language, C++ (Programming Language), Software Debugging, File Systems, Emulators, Field-Programmable Gate Array (FPGA), Systems Analysis, Python (Programming Language), Program Analysis, Reverse Engineering, Scripting, IDA Pro
- **Published:** August 10, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=6f90f0feb5b8fa34

## About the Role

Successful candidates will bring extensive hands-on experience designing, developing, and deploying tools at the intersection of command and control, persistence, and networking.

This role is suited for highly experienced security researchers who are comfortable working at the lowest levels of software and system analysis, including reverse engineering compiled programs, analyzing assembly, and developing custom research capabilities., * TS/SCI Clearance is mandatory

 * Highly experienced with reverse engineering compiled programs (C/C++).
 * Highly experienced in reading common assembly languages, including x86, x86-64, and ARM.
 * Experience developing in scripting languages, including Python.
 * Experience working with debuggers and decompilers such as gdb, Binja, and IDA Pro.

Desired Qualifications

 * Experience developing/defeating mitigations, including ASLR, DEP, N^X.
 * Experience developing defeats of common anti-RE techniques, including obfuscation.
 * Detailed understanding of embedded platforms (FPGA, physical memory).
 * Experience securely implementing cryptographic primitives, including AES-GCM, SHA256, ECDSA.
 * Experience with program analysis tools and techniques, including control flow, program slicing, and taint tracing.
 * Effective use of automated analysis, including fuzzers, emulation, and sandbox.
 * Deep knowledge of file systems and formats, including ELF, PE, and Mach-O.
 * Strong ability to communicate effectively with customers and teammates.

Application Question(s):

 * Do you have professional experience reading and analyzing x86, x86-64, and/or ARM assembly?
 * Do you have extensive professional experience reverse engineering compiled C/C++ programs?
 * Do you have hands-on professional experience using reverse engineering and debugging tools such as IDA Pro, Binja, or gdb?



## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [WeAreDevelopers LIVE – Web Scraping, Agents, Actors and more](https://www.wearedevelopers.com/videos/1764-wearedevelopers-live-web-scraping-agents-actors-and-more)
- [Surviving the Vulnpocalypse: Open Source and Supply Chain Security in a Post Mythos World](https://www.wearedevelopers.com/videos/100279-surviving-the-vulnpocalypse-open-source-and-supply-chain-security-in-a-post-mythos-world)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Prototyping with Hardware and the Web](https://www.wearedevelopers.com/videos/651-prototyping-with-hardware-and-the-web)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)