Software Developer III
This position is contingent upon funding with an expected start date of December 2025
SECRET Clearance required
SRG is seeking a skilled developer to create and sustain tools for analyzing and exploiting protocol and service vulnerabilities, including C2 frameworks. The role involves working with protocols like DNS, HTTP/S, WebSockets, and SMB; implementing STIGs; debugging software; and using code analysis tools. Candidates should be proficient in languages such as C# (.NET), C, C++, Python, Go, Rust, and Assembly, and experienced with Agile/DevSecOps, version control, and containerization tools like Docker and PyEnv.
On-site only, no telework.
Virginia Beach, VA
- Develop, test, and sustain tools used for analyzing protocol and service vulnerabilities.
- Recommend and build frameworks to exploit vulnerabilities in various protocols and services.
- Develop proof-of-concept code to build or tailor exploits, especially for Command and Control (C2) tools.
- Work with communication protocols such as DNS, HTTP/S, WebSockets, and SMB.
- Perform Security Technical Implementation Guide (STIG) implementations.
- Debug and resolve software issues.
- Utilize code analysis tools to assess software functionality and security.
- Employ version control systems for efficient software development and collaboration.
- Develop and test exploits based on proposed and U.S. Government-approved frameworks.
- Follow the complete software development life cycle, including requirements gathering, design, coding, testing, and maintenance.
- Work within Agile and DevSecOps software development models.
- Write scripts and develop software in one or more of the following languages: C# (.NET), C, C++, Python, Go, Rust, Assembly (highly preferred).
- Leverage containerization technologies such as Docker and virtual environments like PyEnv.
Apply Now
Position:
First Name:
Last Name:
Email:
Phone Number:
Currently Located In:
Available Start Date:
Resume:
Cover Letter:
The questions below are designed for demographic data collection purposes only. They are entirely optional and will not be taken into account when evaluating candidates for the position. Your responses to these questions will be kept confidential and solely used for statistical analysis.
Your application has been submitted