1

Exploit Development Jobs in Virginia (NOW HIRING)

Offensive capability development * Will develop exploits, shellcode, and bypassing mitigations ... software exploit development * 3-5 years development industry experience * Experience in the ...

New

Active TS/SCI with Full Scope Polygraph clearance. * 3+ years of experience in CNO/CNE development, exploit development, or related offensive cyber work focused on Windows. * Strong C programming ...

Active TS/SCI with Full Scope Polygraph clearance. * 3+ years of experience in CNO/CNE development, exploit development, or related offensive cyber work focused on Windows. * Strong C programming ...

Required : • Active TS/SCI with Full Scope Polygraph clearance. • 3+ years of experience in CNO/CNE development, exploit development, or related offensive cyber work focused on Windows. • ...

Required : • Active TS/SCI with Full Scope Polygraph clearance. • 3+ years of experience in CNO/CNE development, exploit development, or related offensive cyber work focused on Windows. • ...

Windows Vulnerability Research

Sterling, VA · On-site

$203K/yr

Exploit development and exploitation * Proven expertise working with Windows operating systems , including internal architectures, debugging, and security mechanisms Preferred Skills (Optional - if ...

Android CNO Developer

Chantilly, VA

$57 - $75/hr

Conduct exploit development, vulnerability research, and PoC creation * Debug at kernel and user-space layers (gdb, LLDB, JNI, V8, Mojo) * Reverse engineer native binaries and Android system ...

Android CNO Developer

Chantilly, VA · On-site

$57.50 - $75.75/hr

Conduct exploit development, vulnerability research, and PoC creation * Debug at kernel and user-space layers (gdb, LLDB, JNI, V8, Mojo) * Reverse engineer native binaries and Android system ...

next page

Showing results 1-20

Exploit Development information

See Virginia salary details

$18

$37

$76

How much do exploit development jobs pay per hour?

As of May 30, 2026, the average hourly pay for exploit development in Virginia is $37.28, according to ZipRecruiter salary data. Most workers in this role earn between $25.72 and $53.85 per hour, depending on experience, location, and employer.

What is an Exploit Development job?

An Exploit Development job involves researching software, hardware, or network vulnerabilities and creating proof-of-concept exploits to demonstrate security weaknesses. Professionals in this role analyze security flaws, write exploits, and sometimes assist in patch development. They often work in cybersecurity firms, government agencies, or red teams conducting penetration testing. Strong knowledge of low-level programming, reverse engineering, and debugging tools is essential.

What are the key skills and qualifications needed to thrive in the Exploit Development position, and why are they important?

To thrive in Exploit Development, you need advanced knowledge of computer systems, programming languages (such as C, C++, Python, or Assembly), and a deep understanding of cybersecurity principles, often supported by a degree in computer science or related field. Familiarity with reverse engineering tools (like IDA Pro, Ghidra, or OllyDbg), debuggers, and certifications such as OSCE or OSEP are commonly required. Strong problem-solving skills, attention to detail, and the ability to communicate complex technical findings clearly are valuable soft skills in this role. These skills and qualities are essential to responsibly discover and analyze security vulnerabilities, develop proof-of-concept exploits, and contribute to organizational or client security enhancements.

What are some of the primary challenges encountered in an Exploit Development role?

Exploit Development professionals often face the challenge of staying ahead of rapidly evolving security defenses and continuously learning new attack techniques and mitigation strategies. The work can require intense focus and patience, as reverse engineering and identifying vulnerabilities in complex systems may take considerable time and persistence. Additionally, strict adherence to ethical guidelines and clear communication with cross-functional security and engineering teams is critical for responsibly handling discovered vulnerabilities. Diligence, adaptability, and ongoing professional development are key to navigating the technical and ethical complexities of this role.
What are the most commonly searched types of Exploit Development jobs in Virginia? The most popular types of Exploit Development jobs in Virginia are:
What job categories do people searching Exploit Development jobs in Virginia look for? The top searched job categories for Exploit Development jobs in Virginia are:
Infographic showing various Exploit Development job openings in Virginia as of May 2026, with employment types broken down into 1% As Needed, 92% Full Time, 4% Part Time, and 3% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $77,545 per year, or $37.3 per hour.

Senior Exploit Developer with Security Clearance

ExoCyber, Inc.

Fort Belvoir, VA

$61.75 - $81.50/hr

Other

Posted 21 days ago


Job description

Our client is seeking a Senior Exploit Developer in Fort Belvoir, VA. to design, build, and validate exploit and implant toolchains used in realistic adversary emulation. Your engineering work will enable red team operations that inform senior DoD mission-assurance decisions. Develop exploit code, in-memory loaders, kernel/userland persistence, and covert tooling.
Test and harden payloads to minimize detection by EDR/AV. Integrate exploits into operational toolchains and assist operators during live assessments. Produce technical annexes and concise executive/technical briefings. Requirements Active TS/SCI (U.S. citizen)
Proficient in C/C++, assembly, and Windows internals (kernel & Win32 APIs).
Demonstrated exploit development experience (memory corruption, ROP, bypass mitigations).
Ability to pass the DCART Senior Developer Aptitude Test (SDAT). Desired Experience with C2 frameworks; Cobalt Strike experience is a plus (nice-to-have, not mandatory).
OSEP/OSEE/OSCP/GREM/GXPN or equivalent practical creds.
Experience building operational-grade implants and delivery pipelines.
Apply: cleared resume, 1–2-page technical write-up (no classified info), and readiness for SDAT.