ZipRecruiter

Log In

1

Vulnerability Researcher Contractor Jobs in Sandy Spring, MD

Navstar

CNO Vulnerability Researcher, SME

Columbia, MD · On-site

$150K - $275K/yr

... sub-contractor on mission-focused IT programs. Our employees are integral players in support of ... Experience in vulnerability research. * Experience in reverse engineering and common security ...

Navstar

CNO Vulnerability Researcher, SME

Columbia, MD · On-site

$150K - $275K/yr

... sub-contractor on mission-focused IT programs. Our employees are integral players in support of ... Experience in vulnerability research. * Experience in reverse engineering and common security ...

Intezra, Inc.

Software Engineer II

Columbia, MD · On-site

$160K - $190K/yr

Experience or interest in offensive cyber operations, vulnerability research, and software reverse ... About Us Intezra Inc. is a small business prime contractor for all realms of cyber and AI/ML ...

next page

Showing results 1-20

All JobsVulnerability Researcher Contractor JobsVulnerability Researcher Contractor Jobs in Sandy Spring, MD

Vulnerability Researcher Contractor information

See Sandy Spring, MD salary details

$30.5K

$114.9K

$167.1K

How much do vulnerability researcher contractor jobs pay per year?

As of Sep 13, 2026, the average yearly pay for vulnerability researcher contractor in Sandy Spring, MD is $114,889.00, according to ZipRecruiter salary data. Most workers in this role earn between $68,100.00 and $156,400.00 per year, depending on experience, location, and employer.

What does a vulnerability researcher contractor do?

A Vulnerability Researcher Contractor is an information security professional who specializes in identifying, analyzing, and documenting security vulnerabilities in software, systems, or networks. They are often hired on a temporary or project basis to assess the security posture of an organization or specific products. Their responsibilities may include conducting penetration tests, reverse engineering software, developing proof-of-concept exploits, and providing recommendations for mitigating discovered vulnerabilities. Contractors in this role typically work independently or as part of a security team and may present their findings to stakeholders or assist in developing security patches.

What are the key skills and qualifications needed to thrive as a vulnerability researcher contractor?

To thrive as a Vulnerability Researcher Contractor, you need a deep understanding of computer systems, networking, programming languages (such as C/C++, Python), and a strong background in cybersecurity, often supported by relevant degrees or certifications like OSCP or CEH. Familiarity with vulnerability assessment tools (e.g., IDA Pro, Burp Suite, Metasploit), reverse engineering platforms, and bug tracking systems is typically required. Analytical thinking, attention to detail, and effective written communication are vital soft skills in this role. These skills ensure the accurate identification, documentation, and mitigation of security vulnerabilities, which are crucial for protecting organizational assets.

What are the typical collaboration dynamics for a vulnerability researcher contractor within cybersecurity teams?

As a Vulnerability Researcher Contractor, you’ll often work closely with internal security teams, developers, and sometimes external clients to identify, analyze, and document security flaws. Despite being a contractor, you’ll participate in regular team meetings, share findings, and sometimes assist in developing proof-of-concept exploits or remediation guidance. The role requires strong communication skills, as you’ll need to clearly explain technical vulnerabilities to both technical and non-technical stakeholders. Contract positions may also require rapid onboarding and adaptability to different workflows, making flexibility and proactive communication essential.

What is the difference between Vulnerability Researcher Contractor vs Penetration Tester?

AspectVulnerability Researcher ContractorPenetration Tester
CredentialsCertifications like OSCP, CEH, CISSP often preferredSimilar certifications, often including OSCP, CEH, GPEN
Work EnvironmentResearch-focused, analyzing vulnerabilities in systems and softwarePractical testing, simulating attacks to identify security gaps
Employer & Industry UsageConsulting firms, cybersecurity companies, freelance rolesSecurity firms, internal security teams, consulting roles
Search & Comparison IntentUnderstanding research vs active testing rolesDistinguishing between research and hands-on attack simulation

While both roles involve cybersecurity expertise, Vulnerability Researcher Contractors focus on discovering and analyzing vulnerabilities through research, whereas Penetration Testers actively simulate attacks to evaluate security defenses. Both roles often require similar certifications and work in related environments, but their core activities differ: research versus practical testing.

What cities near Sandy Spring, MD are hiring for Vulnerability Researcher Contractor jobs?

Cities near Sandy Spring, MD with the most Vulnerability Researcher Contractor job openings:

Vulnerability Researcher Contractor jobs near you

Vulnerability Researcher-Mid

Annapolis Junction, MD

NetSage
See more jobs at NetSageexternal

Full-time

Re-posted 11 days ago

Job description

At NetSage, we are more than a government contractor-we are a mission-focused partner dedicated to advancing national security through exceptional cyber expertise. We believe our success begins with our people, which is why we invest in and care for our employees. We know that employee retention is mission continuity, and we are committed to building long-term careers where our people can grow alongside our customers' evolving missions. Our employees enjoy meaningful work, competitive compensation, outstanding benefits, and opportunities to expand their skills across multiple mission areas. To learn more about our comprehensive benefits and what it's like to build your career at NetSage, visit our Careers page.

Due to the sensitive nature of the work we support, some job descriptions intentionally provide a high-level overview of the role. If you'd like to learn more about a particular opportunity, we encourage you to apply directly or connect with us through our Get In Touch page. We'd be happy to discuss how your experience aligns with our mission and explore where you can make an impact.

Job Description: 

We are seeking a Vulnerability Researcher to advance mission-critical cyber capabilities by uncovering vulnerabilities, analyzing complex systems, and developing innovative solutions that address our customers' most demanding technical challenges. In this role, you will provide engineering and vulnerability research results related to software applications and operating systems to determine functionality, code structure, and system design. The ideal candidate for this role will know how to perform software reverse engineering and have strong proficiency in low-level programming languages. Please consider applying if you meet the following qualifications.

Required Qualifications:

  • TS/SCI with polygraph security clearance.
  • A Bachelor of Science (B.S.) degree in Computer Science or related field and at least three (3) years of contiguous experience in computer science, information systems, or network engineering. Also acceptable is no degree and at least five (5) years of contiguous experience.
  • At least four (4) years of experience programming in Assembly, C, C#, C++, Perl, or Python. 
  • At least four (4) years of demonstrated experience in either hardware or software reverse engineering. 
  • Demonstrable experience actively debugging software and troubleshooting issues with software crashes and programmatic flow.
  • Experience providing written reports, proof-of-concept code, prototypes, and hands-on demonstrations of reverse engineering and vulnerability analysis results. 
  • Experience participating in technical presentations on assigned projects.

Apply