Our client is seeking a Senior Exploit Developer in Fort Belvoir, VA. to design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission-assurance decisions.

• Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
• Test and harden payloads to minimize detection by EDR/AV.
• Integrate exploits into operational toolchains and assist operators during live assessments.
• Produce technical annexes and concise executive/technical briefings.

Requirements

• Active TS/SCI (U.S. citizen)
• Proficient in C/C++, assembly, and Windows internals (kernel & Win32 APIs).
• Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
• Ability to pass the DCART Senior Developer Aptitude Test (SDAT).

Desired

• Experience with C2 frameworks; Cobalt Strike experience is a plus (nice-to-have, not mandatory).
• OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds.
• Experience building operational-grade implants and delivery pipelines.
• Apply: cleared resume, 1–2-page technical write-up (no classified info), and readiness for SDAT.