Apply on Employer Site

Booz Allen Hamilton · 3 days ago

Windows Vulnerability Researcher

Annapolis Junction, MD

Full-time

Hybrid

Mid Level

$87K/yr - $198K/yr

3+ years exp

Booz Allen Hamilton is a leading consulting firm specializing in technology and security solutions. They are seeking a Windows Vulnerability Researcher to deliver offensive capabilities, perform advanced vulnerability research, and develop exploits targeting various components within the Windows ecosystem.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

U.S. Citizen Only

Responsibilities

Deliver production grade offensive capabilities as an expert in Android vulnerability research and exploit development

Discover, weaponize, and operationalize previously unknown vulnerabilities in the Android ecosystem, performing work that directly enables strategic intelligence collection and cyber effects missions

Perform advanced vulnerability research across Windows kernel, user-mode components, Hyper-V, and hardware-assisted security features

Develop reliable exploits targeting user applications, system services, kernel drivers, virtualization layers, and firmware subsystems

Engineer persistent CNO implants and infrastructure using C/C++, Python, and Windows APIs

Reverse engineer closed-source binaries and system components at scale

Bypass modern mitigations such as ASLR, CFG, CET, HVCI, kernel patch protection, driver signature enforcement, and application sandboxing

Author comprehensive technical documentation for delivery and sustainment

Contribute to capability roadmaps and emerging tradecraft development

Utilize AI and LLM-powered tooling to accelerate vulnerability discovery and exploit implementation

Qualification

Vulnerability researchExploit developmentC/C++PythonWindows APIsIDA ProGhidraBinary NinjaWinDbgX64dbgProcDumpKernel hardeningSandboxingGitLab CI/CDX86-64 architectureAssembly languageOperational supportTechnical documentation