Vulnerability Jobs

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Platform DevOps Engineer Job Type: Full Time Location: Columbia, MD Clearance Requirement: TS/SCI, CI Poly Salary : Senior $215K SME $240K WHAT YOU’LL DO SIXGEN is actively seeking candidates to be part of a team that supports the United States Cyber Command (USCC). Our team is standing up USCYBERCOM’s AI Enterprise capability — the central hub that mission teams turn to when they want to move an AI solution from prototype to a secure, governed, enterprise-scale service. As a Senior Platform / DevOps Engineer on this team, you will build and run the infrastructure, pipelines, and control-plane guardrails that let the command adopt AI safely and at scale, with significant, visible impact on the mission of the USCC. What You'll Be Doing: Provide embedded operations support, capability integration, and rapid prototyping for AI-enabled tools in support of our customer. Design, implement, and maintain robust infrastructure for enterprise AI applications in cloud environments (AWS, Microsoft Azure) and on-prem/air-gapped/classified environments. Develop and optimize engineering workflows and processes to support AI model and agent development, deployment, and maintenance. Architect and manage CI/CD pipelines for continuous integration and continuous delivery of AI models, agents, and applications. Implement and manage containerization and orchestration solutions using Docker and Kubernetes, and build and maintain control-plane guardrails — identity, policy enforcement, approvals, audit/logging, and observability. Ensure efficient AI mo

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: AI/ML Engineer Job Type: Full Time Location: Columbia, MD Clearance Requirement: TS/SCI, CI Poly Salary : Senior $215, SME $240K WHAT YOU’LL DO SIXGEN is actively seeking candidates to be part of a team that supports the United States Cyber Command (USCC). Our team is standing up USCYBERCOM’s AI Enterprise capability — the central hub that mission teams turn to when they want to move an AI solution from prototype to a secure, governed, enterprise-scale service. As a AI/ML Engineer on this team, you will design and integrate the models, agents, and AI workflows that run on that platform, with significant, visible impact on the mission of the USCC. What You'll Be Doing: Provide embedded operations support, capability integration, and rapid prototyping for AI/ML-enabled tools in support of our customer. Design and integrate LLM/agent orchestration workflows using agentic frameworks such as LangGraph, Agno, and the NVIDIA NeMo Agent Toolkit. Tune model gateway routing logic to select, evaluate, and optimize across multiple frontier and open-weight models for cost, performance, and mission fit. Develop and integrate RAG pipelines, vector databases, and memory services to give agents access to mission knowledge and context. Implement MCP (Model Context Protocol)-based tool-broker integrations so agents can safely and securely access enterprise tools and data. Evaluate, benchmark, and tune models and agent behaviors; build automated evaluation pipelines to track quality, safety, and performance over time. Partner with data scientists and mission analysts to

Enterprise Account Executive — New Logo Remote — United States Base: $125,000–$175,000 | OTE: $250,000–$350,000 | Uncapped Commission + Equity About RapidFort RapidFort is changing how organizations manage software vulnerabilities. Traditional security tools find vulnerabilities and leave engineering teams with an ever-growing remediation backlog. RapidFort goes further — helping organizations automatically reduce vulnerabilities and shrink their software attack surface while accelerating compliance. We work with enterprise, highly regulated, and U.S. government environments where security matters. We’re growing our enterprise sales team and looking for proven new-logo hunters who want to help build the next stage of RapidFort. The Opportunity This is a true enterprise hunting role. You’ll own a territory, build pipeline, open new enterprise accounts, and manage complex sales cycles from first conversation through close. You’ll sell directly to CISOs, security leaders, platform engineering and DevSecOps teams, supported by Solutions Engineering and direct access to RapidFort’s leadership. This is an opportunity for someone who wants more than a territory to manage — you’ll have a voice in how we sell, where we compete, and how we grow. What You’ll Do Build, develop and close net-new enterprise business Create pipeline through strategic outbound, your network, partners and RapidFort’s GTM programs Develop relationships with CISOs and senior security, cloud and engineering leaders Own complex, multi-threaded enterprise sales cycles from discovery through technical evaluation, procurement and close Partner with Solutions Engineering to deliver successful technical evaluations and proofs of value Build territory and account strategies that consistently deliver against quota Use a structured sales methodology such as MEDDPICC to qualify and advance opportunities Maintain disciplined pipeline management and accurate forecasting Work with partners and cloud ecosystems wher

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: DoW, Account Lead Job Type: Full Time Location: Hybrid. Proximity to DC, Maryland and Virginia required Clearance Requirements: TS/SCI Travel: Up to 25%, depending on your location ABOUT THE TEAM SIXGEN supports cyber and intelligence missions by helping government and commercial organizations overcome global cybersecurity challenges. Our highly skilled operators conduct research and assessments based on real-world threats, simulating adversaries and malicious actors to deliver actionable findings on critical assets and infrastructures. Our program planners advise mission owners to bring rapid solutions to intelligence leaders. Using innovative processes, tools, and techniques, we predict and overcome cybersecurity vulnerabilities. COMPENSATION & BENEFITS SIXGEN offers a competitive executive compensation package, designed to reflect the outsized impact and enterprise value creation expected of this role. The final package will be determined based on experience, qualifications, and demonstrated ability to lead strategic growth. Additionally, SIXGEN offers top-tier benefits for full-time employees, including: Employer-paid health insurance premiums (medical, dental, vision) for you and your family Employer-paid short/long term disability insurance and basic life/AD&D insurance 401K with a 4% employer contribution Professional development reimbursement options available (training, certification, education, etc)​ Flexible and remote work policies for most positions Flexible PTO and holiday schedule OUR COMMITMENT SIXGEN is an Equal Opportunity Employe

DIRECTOR OF CYBER SECURITY Location: United States — Remote: West Coast preferred Department: Information Technology — Security, Risk & Compliance Eligibility: U.S. citizenship required ABOUT RAPIDFORT RapidFort is a cybersecurity company focused on helping organizations secure and optimize their software supply chain and containerized environments. Our platform helps teams reduce software vulnerabilities and attack surface while improving the security and efficiency of modern cloud-native applications. We work with commercial enterprises and public-sector organizations operating in highly regulated and security-sensitive environments. Title: Director of Cyber Security Department: Information Technology — Security, Risk & Compliance Reports To: Chief Information Officer, with a standing reporting line to the Audit Committee Direct Reports: Security operations, security engineering, and governance/risk/compliance, including a dedicated compliance specialist Location: REMOTE Employment Type: Full-time Travel: Periodic travel for audits, customer engagements, and leadership meetings On-Call: Incident commander for declared security incidents ABOUT THE ROLE RapidFort Inc. is looking for a Director of Cyber Security to own our security posture and the risk position behind it — what our controls are, whether they work, what remains exposed, and who has accepted that exposure. This is a horizontal role by design. Cloud Operations, Infrastructure Engineering, and Corporate IT each own an estate and run it. You own the standard those estates are held to, the evidence that the standard is met, and the response when it is not. You set the requirement and verify the outcome; the estate owner executes the remediation. That separation is deliberate — it is what makes the assurance worth anything. You will own the ISO 27001 ISMS and the SOC 2 Type 2 program end to end, command security incidents with authority to direct

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Reverse Engineer Job Type: Full-time Location: Sterling, VA (Five days in office) Clearance Requirements: Active Top Secret clearance required Experience: Intermediate, Senior, and Principal levels WHAT YOU'LL DO SIXGEN is actively seeking candidates to provide critical support for a variety of IC, DoD, and DoJ customers. We welcome candidates across a range of experience levels, from early-career professionals to seasoned veterans. Our reverse engineers should be familiar with both traditional applications and operating systems, as well as embedded systems. SIXGEN is embracing AI to enhance the speed and efficiency of our work. You’ll have the opportunity to incorporate AI into your workflow, and experiment with new tools and strategies as the space evolves. This position may allow hybrid work; however, this is dependent on the project, therefore candidates may be required to be in the office full time. KEY RESPONSIBILITIES Reverse engineering compiled code with IDA Pro or Ghidra from a variety of computing platforms Identifying vulnerabilities through reverse engineering Developing C/C++ code in the kernel and userland on Linux, Windows, and embedded operating systems Developing Python code for server applications and processing of binary data streams Reverse engineering embedded system hardware including black box analysis, firmware extraction, and debugging using GDB, JTAG, and other equivalent tools Implementing automation for testing our tools, fuzzing, and using AI/ML for reverse engineering QUALIFICATIONS Intermediate: 3+ years of relevant experience. Senior: 6

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position:Red Team Operator & Infrastructure SME Job Type: Full time Location: Remote , 1x a week onsite in DC Clearance Requirement: None WHAT YOU’LL DO SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You’ll work with our highly skilled operators conducting research and assessments based on real-world threats. You’ll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you’ll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent. Responsibilities include: Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities. Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs). Develop and use custom tools and methods to evade detection and maintain stealth during engagements. Collaborate with blue and purple teams to improve detection, response, and overall security posture. Document findings and deliver clear, actionable reports to technical and executive stakeholders. Develop, automate and deploy red team infrastructure Secure infrastructure from unauthorized access as well as against various TTPs Technology proficiency includes: CRTO certification. CRTL, OSEP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required. Extensive R

Public Sector Marketing Manager Location: United States — Remote Department: Marketing / Public Sector Company: RapidFort Salary Range: $120,000–$160,000 USD annually , depending on experience, qualifications, and location Eligibility: U.S. citizenship required About RapidFort RapidFort is a cybersecurity company focused on helping organizations secure and optimize their software supply chain and containerized environments. Our platform helps teams reduce software vulnerabilities and attack surface while improving the security and efficiency of modern cloud-native applications. We work with commercial enterprises and public-sector organizations operating in highly regulated and security-sensitive environments. The Role RapidFort is looking for a Public Sector Marketing Manager to lead marketing programs supporting our growing U.S. public-sector business. This role will sit at the intersection of marketing, sales, partnerships, and our public-sector practice. You will be responsible for translating RapidFort’s technical capabilities into compelling messaging and campaigns for federal agencies, government partners, systems integrators, and the broader public-sector ecosystem. We’re looking for someone who understands how marketing to the public sector differs from traditional enterprise marketing — including government buying cycles, contract vehicles, partner ecosystems, industry events, and the importance of building credibility within the federal community. Due to the nature of RapidFort’s U.S. public-sector work and applicable customer and government requirements, candidates for this position must be U.S. citizens. What You’ll Do Develop and execute RapidFort’s public-sector marketing strategy in partnership with Public Sector leadership, Sales, and the broader Marketing team. Build targeted campaigns designed to generate awareness, engagement, pipeline, and revenue within federal and public-sector accounts. Develop messaging and positioning tailored to gove

About the Team The Intelligence and Investigations team is dedicated to ensuring the safe, responsible deployment of AI by rapidly detecting and mitigating abuse. Our team leverages the latest testing methodologies to uncover vulnerabilities and emerging threats, helping safeguard OpenAI’s products and users. We work closely with cross-functional partners across product, policy, and engineering to drive a comprehensive defense strategy against evolving adversarial challenges. About the Role As a Red Team Specialist focused on cyber, you will help answer two practical questions: What cyber capabilities can our models provide to real-world attackers, and do our safeguards remain effective when those attackers use increasingly sophisticated techniques? The role combines scaled evaluation with expert-driven testing. You may bring deeper experience in cybersecurity and use that expertise to judge whether a model’s behavior meaningfully changes attacker capability. Alternatively, you may bring deeper experience in model evaluations, automation, or agentic harnesses and apply those skills to building rigorous cyber testing. We do not expect every candidate to be equally deep in both areas, but successful candidates will have a strong foundation in one and enough fluency in the other to work effectively across the boundary. Most of your work will focus on model cyber capabilities and safeguards; you will also spend a portion of your time testing novel abuse risks in agentic systems. This role is located in San Francisco, CA or Seattle, WA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Design and run rigorous evaluations of model cyber capabilities and safeguards, including policy adherence, correct refusal, over refusal, and resilience to jailbreaking and other adversarial techniques. Conduct hands-on testing to understand what models can enable when used by experienced security practiti

About the Team The Intelligence and Investigations team is dedicated to ensuring the safe, responsible deployment of AI by rapidly detecting and mitigating abuse. Our team leverages the latest testing methodologies to uncover vulnerabilities and emerging threats, helping safeguard OpenAI’s products and users. We work closely with cross-functional partners across product, policy, and engineering to drive a comprehensive defense strategy against evolving adversarial challenges. About the Role As a Red Teamer focused on cyber, you will help answer two practical questions: What cyber capabilities can our models provide to real-world attackers, and do our safeguards remain effective when those attackers use increasingly sophisticated techniques? The role combines scaled evaluation with expert-driven testing. You may bring deeper experience in cybersecurity and use that expertise to judge whether a model’s behavior meaningfully changes attacker capability. Alternatively, you may bring deeper experience in model evaluations, automation, or agentic harnesses and apply those skills to building rigorous cyber testing. We do not expect every candidate to be equally deep in both areas, but successful candidates will have a strong foundation in one and enough fluency in the other to work effectively across the boundary. Most of your work will focus on model cyber capabilities and safeguards; you will also spend a portion of your time testing novel abuse risks in agentic systems. This role is located in San Francisco, CA or Seattle, WA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Design and run rigorous evaluations of model cyber capabilities and safeguards, including policy adherence, correct refusal, over refusal, and resilience to jailbreaking and other adversarial techniques. Conduct hands-on testing to understand what models can enable when used by experienced security practitioners, in

About the Team Codex is OpenAI's software engineering agent. Codex Security extends that work into one of the most important product areas in AI: helping organizations find, validate, prioritize, and fix real vulnerabilities in the software they build and depend on. The Codex Cyber team is building the product and platform foundations for AI-native application security. This includes Codex Security product experiences, cloud-based security analysis, platform controls across Codex, customer deployment and support tooling, and infrastructure that helps security researchers and cyber models improve over time. The team is early, small, and growing quickly, with a mandate to move fast and hire exceptional builders. About the Role We are looking for software engineers first: strong full-stack or product-minded generalists who can own ambiguous product and platform problems end to end. Security experience is helpful, and security curiosity is important, but this is not a role for security specialists who only occasionally write code. The right person is an excellent builder who is excited to work in security and can turn complex research, product, and customer needs into reliable systems. You will work across user-facing product surfaces, developer workflows, backend services, security analysis pipelines, cloud infrastructure, and internal tooling. You may build features that make Codex Security more useful for application security teams, systems that scale cloud-based security analysis, platform controls that make agentic coding safer, or infrastructure that helps security researchers and models become more effective. You will collaborate closely with engineering, product, security research, infrastructure, and customer-facing partners as Codex Cyber becomes a major product and platform investment for OpenAI. In this role, you will: Build end-to-end product features for Codex Security, from developer-facing interfaces to APIs, backend services, and workflow tooling. Own a

Enterprise Account Executives (EMEA) Software Supply Chain Security | Cloud Security | DevSecOps Join RapidFort and Help Secure the World's Software RapidFort is a leading Software Supply Chain Security platform that helps organizations continuously eliminate software vulnerabilities, reduce attack surfaces, harden containerized applications, and automate compliance. Our platform enables enterprises and public sector organizations to build, deploy, and operate secure software with near-zero vulnerabilities. As we expand across Europe, we are seeking multiple high-performing Enterprise Account Executives to accelerate our growth and help organizations address increasingly complex software supply chain security challenges driven by NIS2, DORA, and CRA evolving cyber threats. The Opportunity This is a true hunter role focused on generating net-new business, building pipeline, and closing enterprise opportunities. Successful candidates will have a proven track record of opening new accounts, engaging executive and technical stakeholders, and consistently exceeding sales targets. You will be responsible for driving growth within your assigned territory while collaborating closely with marketing, channel partners, solutions engineering, and customer success teams. Key Responsibilities Generate and qualify new business opportunities through outbound prospecting, networking, referrals, events, and partner engagement. Build and maintain a strong pipeline of enterprise opportunities within your assigned territory. Develop trusted relationships with CISOs, Security Leaders, Platform Engineering, DevOps, Software Development, and IT leadership teams. Lead the entire sales process from initial engagement through evaluation, negotiation, and close. Consistently achieve and exceed pipeline generation and revenue targets. Maintain accurate forecasting and opportunity management within CRM systems. Collaborate with marketing, channel, and technical teams to execute regional growth s

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: On-NET Operator Job Type: Full-time Location: Sterling or Reston, VA (Hybrid) Clearance Requirements: Active TS/SCI required Experience: 7+ years WHAT YOU'LL DO We are seeking a skilled and motivated On-Net Operators to support advanced offensive cyber operations and mission-focused assessments for federal customers. The ideal candidate will possess deep technical expertise in networking, operating systems, digital forensics, and adversary tradecraft, with the ability to analyze complex environments, identify vulnerabilities, and emulate sophisticated threat actors. This role requires a highly analytical and self-motivated professional who can operate independently, lead small teams, and solve complex technical challenges in support of critical national security missions. KEY RESPONSIBILITIES Operations Conduct cyber operations and adversary emulation activities against complex environments. Analyze networks, systems, applications, and code to identify vulnerabilities and attack paths. Perform network traffic analysis, digital forensics, and technical investigations. Develop and execute creative solutions to achieve operational objectives. Technical Analysis & Development Utilize advanced networking, tunneling, and system-level expertise to support mission requirements. Analyze and manipulate Linux and Windows operating systems, filesystems, and network services. Develop and modify tools, scripts, and automation using languages such as Python, Bash, and C. Assess network protocols, encryption techniques, and enterprise environments. Collaboration & Leadership O

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Senior Data Scientist Job Type: Full-time Location: Onsite, Ft. Meade, MD Clearance Requirements: Active TS/SCI with Polygraph required Work Schedule: 5 days per week onsite Travel Requirements: None Experience: 4+ years WHAT YOU'LL DO SIXGEN supports missions by serving government and commercial organizations as they overcome global cybersecurity challenges. In this position, you’ll provide meaningful support to our customer’s missions and operations. You’ll work alongside a team of highly skilled operators who are dedicated to using innovative processes, tools, and techniques to get things done. KEY RESPONSIBILITIES Develop, and maintain robust and scalable data pipelines for enterprise AI applications including defining appropriate data model concepts Develop high-performance data parsers for extremely large and complex datasets Implement and manage various database systems, including graph, SQL, NoSQL, and vector databases Collaborate with AI/ML engineers and data scientists to understand data requirements and optimize data access and retrieval for AI models Ensure data quality, integrity, and security across all data storage solutions Support the deployment and maintenance of AI applications by providing expert data engineering capabilities Familiarity with AI concepts in the context of data storage, access, and retrieval Continuously optimize data infrastructure for performance, cost-efficiency, and scalability REQUIRED QUALIFICATIONS Bachelor's degree in a relevant technical fi

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Lead Modeling and Simulation Engineer Job Type: Full Time Location: Onsite Clearance Requirements: TS/SCI & Poly (MUST HAVE) Travel: Up to 10% ABOUT THE TEAM SIXGEN supports missions by serving government and commercial organizations as they overcome global cybersecurity challenges. In this position, you’ll provide meaningful support to our customer’s missions and operations. You’ll work alongside a team of highly skilled operators who are dedicated to using innovative processes, tools, and techniques to get things done. Key Responsibilities Lead the development and implementation of cyber-physical and virtual simulation environments, including test ranges and emulated networks Design and execute modeling frameworks to replicate real-world systems, threats, and operational scenarios Integrate live, virtual, and constructive (LVC) simulation capabilities to support training, testing, and mission rehearsal Collaborate with cyber operators, engineers, and analysts to ensure simulations accurately reflect threat behaviors and mission requirements Oversee the validation and verification (V&V) of models and simulation outputs to ensure accuracy and reliability Support data collection, analysis, and visualization from simulation activities to inform decision-making Ensure compliance with DoD/IC modeling and simulation standards, cybersecurity requirements, and system accreditation processes Required Qualifications Bachelor’s or Master’s degree in Computer Science, Engineering, Mathematics, or a relate