Vulnerability Researcher

M9 Solutions is seeking a Senior Vulnerability Researcher – Windows / CNE to work on-site in support of a government contract for a client located in Arlington, VA . An active TS/SCI clearance is required. Responsibilities Lead advanced vulnerability research on Windows operating systems, applications, and core OS components (including kernel and drivers). Analyze, reverse engineer, and understand complex vulnerabilities to support CNE/CNO missions. Use tools such as IDAPro, Ghidra, BinaryNinja, and WinDbg/x64dbg for in‑depth binary analysis and debugging, including creating or extending custom tooling when needed. Own end‑to‑end research on difficult, poorly documented Windows targets with minimal guidance, from scoping and experimentation through proof‑of‑concept. Develop and document technical approaches, findings, and PoCs to validate vulnerabilities and exploitation paths. Continuously explore and prototype novel techniques for vulnerability discovery and exploitation on modern, mitigated Windows platforms. Collaborate with mission and engineering teams to translate research into operational capabilities. Act as the senior technical point of contact and subject‑matter expert for Windows vulnerability, exploitation, and OS‑internals questions. Required Skills and Qualifications Active TS/SCI clearance. 3+ years in vulnerability research, exploit development, or CNE‑focused reverse engineering, with a sustained focus on Windows (user and kernel mode) rather than general app security or pen‑testing. Deep, practical understanding of Windows internals (kernel architecture, drivers, memory management, system calls, process/thread models, and security mechanisms). Strong CNE/CNO background; experience leveraging vulnerabilities in support of real‑world operations or mission environments. Demonstrated track record solving very hard, low‑level technical problems with minimal guidance, including on research efforts where many others have struggled to make progress. Demonstrated experience discovering and exploiting non‑trivial vulnerabilities in modern, mitigated Windows environments (e.g., ASLR, DEP, CFG, virtualization‑based security). Hands‑on experience with reverse engineering and debugging tools (IDAPro, Ghidra, BinaryNinja, WinDbg, x64dbg, etc.). Fluency in x86/x64 assembly and strong C/C++ skills, plus scripting experience (e.g., Python) for automation, tooling, and PoCs. Strong analytical mindset and ability to clearly communicate complex technical findings to both technical and non‑technical stakeholders. Full‑Time Employee Compensation M9 Solutions’ pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include, but are not limited to, responsibilities of the position, education, experience, knowledge, skills, abilities, as well as internal equity, location, alignment with market data, applicable bargaining agreement (if any), or other law. M9 Benefits Salary Range $160,000—$220,000 USD M9 Solutions, LLC (M9) is a federal subcontractor and we comply with all applicable federal laws prohibiting discrimination in employment, including TitleVII of the Civil Rights Act of 1964. We also adhere to the affirmative action requirements of the Vietnam Era Veterans’ Readjustment Assistance Act (VEVRAA) and Section503 of the Rehabilitation Act, ensuring equal opportunity for veterans and individuals with disabilities. #J-18808-Ljbffr