Lead Cyber Vulnerability Researcher
Johns Hopkins University APL
Laurel, MD · Posted September 2, 2026
Just laid off? Start here: a plan for the first weeks
More in Maryland job market · Aerospace & Defense · Security jobs
More roles at Johns Hopkins University APL
- Antenna Systems & Hardware Engineer · Laurel, MD
- Space Science Instrumentation – Senior Opto-Mechanical Engineer · Laurel, MD
- Network Software Engineer · Laurel, MD
- Senior Spacecraft Thermal Engineer · Laurel, MD
- Guidance and Control Engineer · Laurel, MD
- Weapons System Engineer · Laurel, MD
Security jobs in the rankings
Rankings about security jobs
- Best cities for security jobs #1 San Francisco (316 openings)
- Best cities for security pay after cost of living #1 San Mateo ($241k)
- Most requested AI skills in security jobs #1 AI tools in daily work (10.8%)
- Employers with the most security jobs #1 Amazon (318 roles)
How AI is used in this kind of work
Among computer occupations, all other, AI is already used for a large share of the tasks. Measured exposure for computer occupations, all other: 31% (high).
Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.
Skills this job asks for
Say which you have and which you want to build. We use it to match you to jobs like this one.
About the job
Description
Are you passionate about discovering novel software and hardware vulnerabilities in complex systems?
Do you thrive on leading technical teams to develop innovative techniques for discovering and exploiting vulnerabilities?
If so, we want you to join our group of offensive cyber experts!
We are seeking an experienced cyber vulnerability researcher to lead efforts to identify, analyze, and exploit vulnerabilities in complex hardware, firmware, and software systems. You'll help shape technical strategy, mentor researchers, and drive innovative solutions to some of the nation's most challenging cybersecurity problems. We work in a dynamic environment where collaboration, technical excellence, and continuous learning are central to everything we do.
As a member of our team, you will...
Lead projects to identify and analyze vulnerabilities in complex software, firmware, and hardware systems
Develop novel techniques for vulnerability discovery, exploit development, and offensive cyber research
Mentor and guide engineers and researchers while providing technical leadership across projects
Transition advanced research into operational cyber capabilities in collaboration with multidisciplinary teams
Shape technical strategy and contribute to proposal development, sponsor engagement, and new research initiatives
Communicate findings through presentations, publications, and briefings to sponsors, leadership, and a technical community
Qualifications
You meet our minimum qualifications for the job if you have...
A Bachelor’s in Computer Science, Electrical Engineering, Computer Engineering, or another discipline relevant to the duties as described above
At least 8+ years of experience conducting cyber vulnerability research, reverse engineering, exploit development, or offensive capability development
Demonstrated experience leading technical teams solving complex cybersecurity efforts
Deep understanding of operating systems, computer architecture, exploitation techniques, and modern mitigations
Experience developing software in C/C++, Rust, assembly, or similar low-level languages
Strong written and verbal communication skills
Are about to acquire a Secret level security clearance by your start date and can ultimately acquire a TS/SCI level clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. citizenship.
You'll go above and beyond our minimum requirements if you...
Have a Master's or Ph.D. in Computer Science, Electrical Engineering, Computer Engineering, or related field
Have 12+ years of experience in reverse engineering, cyber capability development, or related technical work
Recognized technical expertise in vulnerability research or offensive cyber operations
Experience leading externally funded research efforts or interacting directly with government sponsors
Publications, presentations, patents, or open-source contributions related to cybersecurity
Experience with embedded systems, SoCs, firmware, or RF systems
Experience leveraging AI to improve vulnerability discovery or reverse engineering workflows
Hold an active TS/SCI security clearance
About Us
Why Work at APL?
The Johns Hopkins University Applied Physics Laboratory (APL) brings world-class expertise to our nation’s most critical defense, security, space and science challenges. While we are dedicated to solving complex challenges and pioneering new technologies, what makes us truly outstanding is our culture. We offer a vibrant, welcoming atmosphere where you can bring your authentic self to work, continue to grow, and build strong connections with inspiring teammates.
At APL, we celebrate our differences of perspectives and encourage creativity and bold, new ideas. Our employees enjoy generous benefits, including a robust education assistance program, unparalleled retirement contributions, and a healthy work/life balance. APL’s campus is located in the Baltimore-Washington metro area. Learn more about our career opportunities at https://www.jhuapl.edu/careers .
All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, physical or mental disability, genetic information, veteran status, occupation, marital or familial status, political opinion, personal appearance, or any other characteristic protected by applicable law. APL is committed to providing reasonable accommodation to individuals of all abilities, including those with disabilities. If you require a reasonable accommodation to participate in any part of the hiring process, please contact Accessibility@jhuapl.edu .
The referenced pay range is based on JHU APL’s good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level with consideration for internal parity. For salaried employees scheduled to work less than 40 hours per week, annual salary will be prorated based on the number of hours worked. APL may offer bonuses or other forms of compensation per internal policy and/or contractual designation. Additional compensation may be provided in the form of a sign-on bonus, relocation benefits, locality allowance or discretionary payments for exceptional performance. APL provides eligible staff with a comprehensive benefits package including retirement plans, paid time off, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, education assistance, and training and development. Applications are accepted on a rolling basis.
Minimum Rate
$105,000 Annually
Maximum Rate
$290,000 Annually
Are you passionate about discovering novel software and hardware vulnerabilities in complex systems?
Do you thrive on leading technical teams to develop innovative techniques for discovering and exploiting vulnerabilities?
If so, we want you to join our group of offensive cyber experts!
We are seeking an experienced cyber vulnerability researcher to lead efforts to identify, analyze, and exploit vulnerabilities in complex hardware, firmware, and software systems. You'll help shape technical strategy, mentor researchers, and drive innovative solutions to some of the nation's most challenging cybersecurity problems. We work in a dynamic environment where collaboration, technical excellence, and continuous learning are central to everything we do.
As a member of our team, you will...
Lead projects to identify and analyze vulnerabilities in complex software, firmware, and hardware systems
Develop novel techniques for vulnerability discovery, exploit development, and offensive cyber research
Mentor and guide engineers and researchers while providing technical leadership across projects
Transition advanced research into operational cyber capabilities in collaboration with multidisciplinary teams
Shape technical strategy and contribute to proposal development, sponsor engagement, and new research initiatives
Communicate findings through presentations, publications, and briefings to sponsors, leadership, and a technical community
You meet our minimum qualifications for the job if you have...
A Bachelor’s in Computer Science, Electrical Engineering, Computer Engineering, or another discipline relevant to the duties as described above
At least 8+ years of experience conducting cyber vulnerability research, reverse engineering, exploit development, or offensive capability development
Demonstrated experience leading technical teams solving complex cybersecurity efforts
Deep understanding of operating systems, computer architecture, exploitation techniques, and modern mitigations
Experience developing software in C/C++, Rust, assembly, or similar low-level languages
Strong written and verbal communication skills
Are about to acquire a Secret level security clearance by your start date and can ultimately acquire a TS/SCI level clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. citizenship.
You'll go above and beyond our minimum requirements if you...
Have a Master's or Ph.D. in Computer Science, Electrical Engineering, Computer Engineering, or related field
Have 12+ years of experience in reverse engineering, cyber capability development, or related technical work
Recognized technical expertise in vulnerability research or offensive cyber operations
Experience leading externally funded research efforts or interacting directly with government sponsors
Publications, presentations, patents, or open-source contributions related to cybersecurity
Experience with embedded systems, SoCs, firmware, or RF systems
Experience leveraging AI to improve vulnerability discovery or reverse engineering workflows
Hold an active TS/SCI security clearance