> Markdown version of [/jobs/ext/4243194-cno-vulnerability-researcher-re-embedded-0-day](https://www.wearedevelopers.com/jobs/ext/4243194-cno-vulnerability-researcher-re-embedded-0-day). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CNO - Vulnerability Researcher - RE, Embedded, 0-Day - **Company:** Erias Ventures, LLC - **Location:** United States - **Experience:** Experienced - **Salary:** $150,000.0 - $260,000.0 - **Contract:** Permanent contract - **Skills:** C (Programming Language), Microsoft Windows, Software Applications, C Sharp (Programming Language), Unix, C++ (Programming Language), Static Program Analysis, Information Systems, Software Debugging, Linux, Perl (Programming Language), Vim (Text Editor), Integrated Development Environments, Python (Programming Language), Automation of Marketing, Microsoft Visual Studio, Reverse Engineering, WinDBg, Code Structure, Emacs, Information Technology, IDA Pro, Reverse Engineering Software, Hardware Infrastructure, Vulnerability Analysis, Web Api - **Published:** October 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2c38e11d79c70d9f ## About the Role Bachelor's Degree in Computer Science or related field, or minimum two (2) years' experience in computer science, information systems, or network engineering, * Minimum two (2) years' experience programming in Assembly, C, C#, C++, Perl, or Python * Minimum two (2) years demonstrated experience in either hardware or software reverse engineering, this often includes the use of tools such as (IDA Pro, Ghidra & Binary Ninja) to identify abstract concepts about the code flow of an application. * 0-day vulnerabilities or CVEs discovered and attributed to themselves * History performing vulnerability research * Experience with writing or using fuzzers - AFL, LibFuzzer, ClusterFuzz, oss-fuzz * Experience with code analysis tools - CodeQL, Joern, Semgrep * History of exploiting or productizing 0-day vulnerabilities * History of exploiting or productizing n-day vulnerabilities/CVEs/publicly disclosed vulnerabilities * History of reverse engineering malware or other code for CNE purposes * Experience with reverse engineering tools - Ghidra, Ida Pro, Binary Ninja * Experience using debuggers - GDB or WinDbg * Experience writing, navigating, and building C/C++ code * Experience with tools like VsCode, Visual Studio, VIM/Emacs * Familiarity with ARM or MIPS architectures and Linux variants * We also use Python to write a lot of our tools, so that is good to see Desired skills: * The use of Unix/Windows system API's, understanding of virtual function tables in C++, heap allocation strategies and protections, and the experience with very large software projects is an advantage when being considered. Kernel programming experience (WDK / Unix||Linux) while not required, is a significant discriminator among other candidates. ## Description The Vulnerability Researcher provides engineering and vulnerability research results related to hardware components, software applications, and operating systems to determine functionality, code structure, and system design for use in the discovery of initial access capabilities. Shall possess the following capabilities: * Actively debug software and troubleshoot issues with software crashes and programmatic flow * Ability to perform source code analysis in an effort to discover software flaws, and provide/author documentation on the impact and severity of the flaw * Ability to develop proof-of-concept exploits against research targets, prototypes, and hands-on demonstrations of vulnerability analysis results * Provide/author and participate in technical presentations on assigned projects * Lead reverse engineering and vulnerability research of hardware components, software applications, and operating systems to determine functionality, code structure, and circuit design for the use in the discovery of initial access capabilities Clearance A current Top-Secret/SCI with polygraph security clearance is required. Candidates cannot be sponsored or nominated for a government security clearance under this position.