-
Summary
Our client is seeking a Senior Exploit Developer in Fort Belvoir, VA. to design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission-assurance decisions. Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
Test and harden payloads to minimize detection by EDR/AV. Integrate exploits into operational toolchains and assist operators during live assessments. Produce technical annexes and concise executive/technical briefings. Requirements Active TS/SCI (U.S. citizen)
Proficient in C/C++, assembly, and Windows internals (kernel & Win32 APIs).
Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
Ability to pass the DCART Senior Developer Aptitude Test (SDAT). Desired Experience with C2 frameworks; Cobalt Strike experience is a plus (nice-to-have, not mandatory).
OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds.
Experience building operational-grade implants and delivery pipelines.
Apply: cleared resume, 1–2-page technical write-up (no classified info), and readiness for SDAT. -
Job Description
Our client is seeking a Senior Exploit Developer in Fort Belvoir, VA. to design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission-assurance decisions. Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
Test and harden payloads to minimize detection by EDR/AV. Integrate exploits into operational toolchains and assist operators during live assessments. Produce technical annexes and concise executive/technical briefings. Requirements Active TS/SCI (U.S. citizen)
Proficient in C/C++, assembly, and Windows internals (kernel & Win32 APIs).
Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
Ability to pass the DCART Senior Developer Aptitude Test (SDAT). Desired Experience with C2 frameworks; Cobalt Strike experience is a plus (nice-to-have, not mandatory).
OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds.
Experience building operational-grade implants and delivery pipelines.
Apply: cleared resume, 1–2-page technical write-up (no classified info), and readiness for SDAT. -
ABOUT THE COMPANY
-
-
Government Careers
Show moreGovernment jobs offer stability, competitive benefits, and the chance to make a meaningful impact on your community and country.
Whether you’re starting your career or seeking new opportunities, these roles provide pathways for growth, security, and service.
Explore positions across a wide range of fields and take the first step toward a rewarding future in public service.
-