ZipRecruiter

Log In

1

Exploit Development Jobs in Virginia (NOW HIRING)

Motion Recruitment

Principal Investigator

Arlington, VA · On-site

This is a full time, hybrid role in the DC metro area focused on embedded hardware, firmware, low level reverse engineering, vulnerability discovery, and exploit development. This role is not limited ...

REDLattice

Android CNO Developer

Chantilly, VA · On-site

$57.50 - $75.75/hr

Conduct exploit development, vulnerability research, and PoC creation * Debug at kernel and user-space layers (gdb, LLDB, JNI, V8, Mojo) * Reverse engineer native binaries and Android system ...

Nightwing

Windows Vulnerability Research

Sterling, VA · On-site

$203K/yr

Exploit development and exploitation * Proven expertise working with Windows operating systems , including internal architectures, debugging, and security mechanisms Preferred Skills (Optional - if ...

REDLattice

Android CNO Developer

Chantilly, VA

$57 - $75/hr

Conduct exploit development, vulnerability research, and PoC creation * Debug at kernel and user-space layers (gdb, LLDB, JNI, V8, Mojo) * Reverse engineer native binaries and Android system ...

Nwis

Windows Vulnerability Research

Sterling, VA

$122K - $253K/yr

Exploit development and exploitation * Proven expertise working with Windows operating systems , including internal architectures, debugging, and security mechanisms Preferred Skills (Optional - if ...

REDLattice

Android CNO Developer

Chantilly, VA

$57.50 - $75.75/hr

Conduct exploit development, vulnerability research, and PoC creation * Debug at kernel and user-space layers (gdb, LLDB, JNI, V8, Mojo) * Reverse engineer native binaries and Android system ...

next page

Showing results 1-20

All JobsExploit Development JobsExploit Development Jobs in Virginia

Exploit Development information

See Virginia salary details

$18

$37

$76

How much do exploit development jobs pay per hour?

As of Jul 14, 2026, the average hourly pay for exploit development in Virginia is $37.28, according to ZipRecruiter salary data. Most workers in this role earn between $25.72 and $53.85 per hour, depending on experience, location, and employer.

What jobs can you get with offsec certs?

With Offensive Security (Offsec) certifications such as OSCP or OSCE, you can pursue roles like penetration tester, security analyst, or vulnerability researcher. These certifications demonstrate practical skills in ethical hacking, penetration testing, and security assessment, which are highly valued in cybersecurity teams and consulting firms.

What jobs can I get as a game developer?

As a game developer, you can pursue roles such as software engineer, gameplay programmer, graphics programmer, or tools developer. These positions typically require skills in programming languages like C++ or C#, familiarity with game engines such as Unity or Unreal, and knowledge of game design principles. Opportunities exist in both independent studios and large gaming companies, often involving collaborative development environments and project deadlines.

What is an Exploit Development job?

An Exploit Development job involves researching software, hardware, or network vulnerabilities and creating proof-of-concept exploits to demonstrate security weaknesses. Professionals in this role analyze security flaws, write exploits, and sometimes assist in patch development. They often work in cybersecurity firms, government agencies, or red teams conducting penetration testing. Strong knowledge of low-level programming, reverse engineering, and debugging tools is essential.

What are the key skills and qualifications needed to thrive in the Exploit Development position, and why are they important?

To thrive in Exploit Development, you need advanced knowledge of computer systems, programming languages (such as C, C++, Python, or Assembly), and a deep understanding of cybersecurity principles, often supported by a degree in computer science or related field. Familiarity with reverse engineering tools (like IDA Pro, Ghidra, or OllyDbg), debuggers, and certifications such as OSCE or OSEP are commonly required. Strong problem-solving skills, attention to detail, and the ability to communicate complex technical findings clearly are valuable soft skills in this role. These skills and qualities are essential to responsibly discover and analyze security vulnerabilities, develop proof-of-concept exploits, and contribute to organizational or client security enhancements.

What does an exploitation analyst do?

An exploitation analyst identifies and develops security vulnerabilities in software and systems to assess their security posture. They use tools like vulnerability scanners and exploit frameworks, often working in cybersecurity or penetration testing environments, to simulate attacks and improve defenses. Strong knowledge of programming, networking, and security protocols is essential for this role.

What is exploit development?

Exploit development is the process of creating code or techniques to identify and leverage vulnerabilities in software or hardware systems. Professionals in this field analyze security flaws, often using programming skills and tools like debugging and reverse engineering, to develop exploits that can test or demonstrate system weaknesses. It is a specialized area within cybersecurity that requires knowledge of operating systems, networking, and security protocols.

What are some of the primary challenges encountered in an Exploit Development role?

Exploit Development professionals often face the challenge of staying ahead of rapidly evolving security defenses and continuously learning new attack techniques and mitigation strategies. The work can require intense focus and patience, as reverse engineering and identifying vulnerabilities in complex systems may take considerable time and persistence. Additionally, strict adherence to ethical guidelines and clear communication with cross-functional security and engineering teams is critical for responsibly handling discovered vulnerabilities. Diligence, adaptability, and ongoing professional development are key to navigating the technical and ethical complexities of this role.

What are the most commonly searched types of Exploit Development jobs in Virginia? The most popular types of Exploit Development jobs in Virginia are:
What are popular job titles related to Exploit Development jobs in Virginia? For Exploit Development jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Exploit Development jobs in Virginia look for? The top searched job categories for Exploit Development jobs in Virginia are:
Exploit Development jobs near you
Infographic showing various Exploit Development job openings in Virginia as of July 2026, with employment types broken down into 1% As Needed, 82% Full Time, 14% Part Time, and 3% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $77,545 per year, or $37.3 per hour.

Senior Exploit Developer -- DCART / Advanced Red Cyber

Omniscius Consulting

Fort Belvoir, VA • On-site

$61.75 - $81.50/hr

Full-time

Re-posted 5 days ago

Job description

Our client is seeking a Senior Exploit Developer in Fort Belvoir, VA. to design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission-assurance decisions.
  • Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
  • Test and harden payloads to minimize detection by EDR/AV.
  • Integrate exploits into operational toolchains and assist operators during live assessments.
  • Produce technical annexes and concise executive/technical briefings.
Requirements
  • Active TS/SCI (U.S. citizen)
  • Proficient in C/C++, assembly, and Windows internals (kernel Win32 APIs).
  • Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
  • Ability to pass the DCART Senior Developer Aptitude Test (SDAT).
Desired
  • Experience with C2 frameworks; Cobalt Strike experience is a plus (nice-to-have, not mandatory).
  • OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds.
  • Experience building operational-grade implants and delivery pipelines.
  • Apply: cleared resume, 1–2-page technical write-up (no classified info), and readiness for SDAT.

Powered by JazzHR

nH2tDLA9nx