Risk Vulnerability Researcher

Job Title: Risk Vulnerability Researcher Job Description In this position, you will serve as a Principal Vulnerability Researcher for the Space Systems Protection Directorate. You will work alongside a multidisciplinary team of cybersecurity researchers and engineers supporting space and ground system security initiatives. This is a hands-on technical role where reverse engineering, exploit development, and creative problem-solving meet mission-critical impact. The candidate should be passionate about uncovering vulnerabilities at the OS, application, and firmware levels, and crafting proof-of-concept exploits to validate findings. A deep technical understanding of embedded Linux and real-time operating systems (RTOS) is essential. Responsibilities Perform vulnerability research and reverse engineering on embedded Linux and real-time operating systems, including firmware and applications. Conduct static and dynamic analysis of binaries and source code to identify security flaws and exploitation paths. Develop proof-of-concept exploits and mitigations for discovered vulnerabilities. Analyze Linux-based environments and other minimalized system configurations for misconfigurations and code-level weaknesses. Contribute to custom fuzzing and emulation environments for embedded targets such as QEMU and Unicorn. Essential Skills Strong knowledge of embedded Linux internals including kernel, drivers, IPC, and memory management. Experience with RTOS platforms such as VxWorks, RTEMS, FreeRTOS, and Integrity. Proficiency in reverse engineering tools like IDA Pro, Ghidra, and Binary Ninja. Expertise in exploit development techniques including heap/stack exploitation, ROP, and sandbox bypass. Familiarity with firmware extraction and analysis using tools like binwalk, Ghidra, and QEMU. Proficient in C/C++ and Python for tooling and exploit scripting. Experience with BusyBox utilities and lightweight Linux environments. Additional Skills & Qualifications Experience testing embedded systems, firmware, or devices such as ground-station equipment and communications gear. Excellent written and verbal communication skills, with the ability to present technical findings to non-technical leadership and produce clear, prioritized remediation plans. Demonstrated ability and willingness to train, mentor, and develop junior or mid-level engineers in vulnerability research methodologies, fostering knowledge transfer and a culture of technical excellence. Experience with space vehicle software stacks including flight software, command & data handling, TT&C, and payload management. Familiarity with radiation-hardened hardware, limited SWaP environments, or satellite emulation frameworks. Understanding of secure boot, hardware root of trust, and cryptographic modules such as FIPS 140-2. Familiarity with electronic warfare, RF protocol analysis, SDR toolchains like GNU Radio and URH, or telecommand/telemetry exploitation techniques for ground systems. Work Environment You will be working in a collaborative and innovative environment, equipped with state-of-the-art technologies and tools. The role may involve working with cloud engineering and requires strong commitment to fostering a culture of technical excellence. The position offers opportunities to present findings to non-technical leadership and to mentor junior engineers, promoting a supportive and knowledge-sharing work culture Job Type & Location This is a Contract to Hire position based out of Colorado Springs, CO. Pay and Benefits The pay range for this position is $125000.00 - $200000.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: • Medical, dental & vision • Critical Illness, Accident, and Hospital • 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available • Life Insurance (Voluntary Life & AD&D for the employee and dependents) • Short and long-term disability • Health Spending Account (HSA) • Transportation benefits • Employee Assistance Program • Time Off/Leave (PTO, Vacation or Sick Leave) Workplace Type This is a fully remote position. Application Deadline This position is anticipated to close on Aug 24, 2026. About Actalent Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 20,000 consultants and 5,000 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500. We are proud to be an Engineering News-Record (ENR) Top 500 Design Firm for our engineering design services and a ClearlyRated Best of Staffing® winner for both client and talent service. The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email [email protected] for other accommodation options. San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records. Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.