1

Exploit Development Jobs in Virginia (NOW HIRING)

Windows CNO Developer

Herndon, VA · On-site

$129K - $177K/yr

Required : • Active TS/SCI with Full Scope Polygraph clearance. • 3+ years of experience in CNO/CNE development, exploit development, or related offensive cyber work focused on Windows. • ...

Required : • Active TS/SCI with Full Scope Polygraph clearance. • 3+ years of experience in CNO/CNE development, exploit development, or related offensive cyber work focused on Windows. • ...

Required : • Active TS/SCI with Full Scope Polygraph clearance. • 3+ years of experience in CNO/CNE development, exploit development, or related offensive cyber work focused on Windows. • ...

Conduct exploit development, vulnerability research, and proof-of-concept creation. * Debug user-space and kernel components using LLDB and other native debugging tools. * Reverse engineer native ...

Android CNO Developer

Chantilly, VA · On-site

$57 - $75/hr

Conduct exploit development, vulnerability research, and PoC creation * Debug at kernel and user-space layers (gdb, LLDB, JNI, V8, Mojo) * Reverse engineer native binaries and Android system ...

Exploit development and exploitation * Proven expertise working with Windows operating systems , including internal architectures, debugging, and security mechanisms Preferred Skills (Optional - if ...

Android CNO Developer

Chantilly, VA · On-site

$57.50 - $75.75/hr

Conduct exploit development, vulnerability research, and PoC creation * Debug at kernel and user-space layers (gdb, LLDB, JNI, V8, Mojo) * Reverse engineer native binaries and Android system ...

Android CNO Developer

Chantilly, VA · On-site

$57.50 - $75.75/hr

Conduct exploit development, vulnerability research, and PoC creation * Debug at kernel and user-space layers (gdb, LLDB, JNI, V8, Mojo) * Reverse engineer native binaries and Android system ...

Exploit development and exploitation * Proven expertise working with Windows operating systems , including internal architectures, debugging, and security mechanisms Preferred Skills (Optional - if ...

iOS CNO Software Engineer

Chantilly, VA · On-site

$144K/yr

Conduct exploit development, vulnerability research, and proof-of-concept creation. * Debug user-space and kernel components using LLDB and other native debugging tools. * Reverse engineer native ...

iOS CNO Software Engineer

Chantilly, VA · On-site

$144K/yr

Conduct exploit development, vulnerability research, and proof-of-concept creation. * Debug user-space and kernel components using LLDB and other native debugging tools. * Reverse engineer native ...

next page

Showing results 1-20

Exploit Development information

See Virginia salary details

$18

$37

$76

How much do exploit development jobs pay per hour?

As of Aug 4, 2026, the average hourly pay for exploit development in Virginia is $37.28, according to ZipRecruiter salary data. Most workers in this role earn between $25.72 and $53.85 per hour, depending on experience, location, and employer.

What is exploit development?

An Exploit Development job involves researching software, hardware, or network vulnerabilities and creating proof-of-concept exploits to demonstrate security weaknesses. Professionals in this role analyze security flaws, write exploits, and sometimes assist in patch development. They often work in cybersecurity firms, government agencies, or red teams conducting penetration testing. Strong knowledge of low-level programming, reverse engineering, and debugging tools is essential.

What are the key skills and qualifications needed to thrive in exploit development, and why are they important?

To thrive in Exploit Development, you need advanced knowledge of computer systems, programming languages (such as C, C++, Python, or Assembly), and a deep understanding of cybersecurity principles, often supported by a degree in computer science or related field. Familiarity with reverse engineering tools (like IDA Pro, Ghidra, or OllyDbg), debuggers, and certifications such as OSCE or OSEP are commonly required. Strong problem-solving skills, attention to detail, and the ability to communicate complex technical findings clearly are valuable soft skills in this role. These skills and qualities are essential to responsibly discover and analyze security vulnerabilities, develop proof-of-concept exploits, and contribute to organizational or client security enhancements.

What are some of the primary challenges encountered in exploit development?

Exploit Development professionals often face the challenge of staying ahead of rapidly evolving security defenses and continuously learning new attack techniques and mitigation strategies. The work can require intense focus and patience, as reverse engineering and identifying vulnerabilities in complex systems may take considerable time and persistence. Additionally, strict adherence to ethical guidelines and clear communication with cross-functional security and engineering teams is critical for responsibly handling discovered vulnerabilities. Diligence, adaptability, and ongoing professional development are key to navigating the technical and ethical complexities of this role.

What are the most commonly searched types of Exploit Development jobs in Virginia? The most popular types of Exploit Development jobs in Virginia are:
Infographic showing various Exploit Development job openings in Virginia as of July 2026, with employment types broken down into 1% As Needed, 80% Full Time, 16% Part Time, and 3% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $77,545 per year, or $37.3 per hour.

Senior Exploit Developer -- DCART / Advanced Red Cyber

Omniscius Consulting

Fort Belvoir, VA • On-site

$61.75 - $81.50/hr

Full-time

Re-posted 27 days ago


Job description

Our client is seeking a Senior Exploit Developer in Fort Belvoir, VA. to design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission-assurance decisions.
  • Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
  • Test and harden payloads to minimize detection by EDR/AV.
  • Integrate exploits into operational toolchains and assist operators during live assessments.
  • Produce technical annexes and concise executive/technical briefings.
Requirements
  • Active TS/SCI (U.S. citizen)
  • Proficient in C/C++, assembly, and Windows internals (kernel Win32 APIs).
  • Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
  • Ability to pass the DCART Senior Developer Aptitude Test (SDAT).
Desired
  • Experience with C2 frameworks; Cobalt Strike experience is a plus (nice-to-have, not mandatory).
  • OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds.
  • Experience building operational-grade implants and delivery pipelines.
  • Apply: cleared resume, 1–2-page technical write-up (no classified info), and readiness for SDAT.

Powered by JazzHR

nH2tDLA9nx