Job description

Gormat is seeking a CNO Software Developer to join our team in support of specialized military cyber operations. You'll be a critical member of a small team, responsible for bringing your high-level offensive cyber expertise and rapid prototyping capability to bear on a critical national security mission. Join our team of best-in-industry cyber warriors who provide superior service in support of national defense objectives. What You'll Be Doing: • Rapidly prototyping advanced offensive cyber capabilities with other senior engineers to meet complex and evolving mission needs. • Embedding with the mission team on-site, working daily with subject matter experts in C, Windows internals, and related low-level disciplines. • Collaborating with the vulnerability research team to gather relevant information on proof-of-concept exploits and engaging with the customer to ensure products meet operational needs. • Contributing to a culture of technical excellence by sharing knowledge, mentoring teammates, conducting design/code reviews, and continually sharpening your own skills in programming, Windows internals, Linux internals, and low-level engineering. • Applying offensive cyber domain expertise, including red/purple team operations, to develop and deliver mission-critical solutions. What Required Qualifications You'll Bring: • USCC JQR qualified (Joint Qualification Record) personnel with proven experience in offensive cyber operations or equivalent contract/civilian work • Bachelor's degree in related field (Computer Science, Cybersecurity, etc.) and 5+ years of experience in exploit/CNO tool development, with preference for offensive domain/red/purple team operators; Master's degree in related field and 3+ years of exploit/CNO tool development experience; 4+ additional years of directly related exploit/CNO tool development experience may be considered in lieu of degree • Proficiency with programming languages such as .NET, Python, C/C++, and/or ASM • Ability to analyze proof-of-concept exploit/CVE vulnerability and engineer it to be stable and testable • Technical Operating System Knowledge with Linux or Windows • Ability to generate accurate documentation for developers and testers What Desired Qualifications You'll Bring: • Minimum 6–8 years of experience in exploit/CNO tool development • Experience with rapid prototyping and automation tooling for advancing rapid outcomes • Networking protocol/testing expertise • Certified/trained in one or more of the following: Corelan Bootcamp/Advanced, ManTech ACTP Windows/Linux/VR&E, OSCP, OSED, OSWE, BCI Training, USCC CCD Developer (Senior) • Experience with Ghidra, GDB, WinDebug, or Fuzzing • Prior experience in offensive cyber operations, red/purple team activities, or equivalent work from a contract/civilian position Location: Fort Meade/Columbia MD (On-Customer Site/Embedded) NOTE: This position requires USCC JQR qualified personnel with proven offensive domain experience. Preference will be given to candidates with red/purple team backgrounds and rapid prototyping skills over traditional software development experience. Defensive-only or network operations center experience will not be considered sufficient for this role. TS/SCI with polygraph is required.

Requirements

Must-haves

Rapidly prototyping advanced offensive cyber capabilities with other senior engineers to meet complex and evolving mission needs.
Embedding with the mission team on-site, working daily with subject matter experts in C, Windows internals, and related low-level disciplines.
Collaborating with the vulnerability research team to gather relevant information on proof-of-concept exploits and engaging with the customer to ensure products meet operational needs.
Applying offensive cyber domain expertise, including red/purple team operations, to develop and deliver mission-critical solutions.
USCC JQR qualified (Joint Qualification Record) personnel with proven experience in offensive cyber operations or equivalent contract/civilian work
Proficiency with programming languages such as .NET, Python, C/C++, and/or ASM
Ability to analyze proof-of-concept exploit/CVE vulnerability and engineer it to be stable and testable
Technical Operating System Knowledge with Linux or Windows
Ability to generate accurate documentation for developers and testers
Minimum 6–8 years of experience in exploit/CNO tool development
Experience with rapid prototyping and automation tooling for advancing rapid outcomes
Networking protocol/testing expertise
Certified/trained in one or more of the following: Corelan Bootcamp/Advanced, ManTech ACTP Windows/Linux/VR&E, OSCP, OSED, OSWE, BCI Training, USCC CCD Developer (Senior)
Experience with Ghidra, GDB, WinDebug, or Fuzzing
Prior experience in offensive cyber operations, red/purple team activities, or equivalent work from a contract/civilian position
Location: Fort Meade/Columbia MD (On-Customer Site/Embedded)
TS/SCI with polygraph is required.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: applicantpro
Effort: medium