Skip to content

Open nowPosted yesterday

Commercial Drone Reverse Engineer / Vulnerability Researcher

Leidos1,909 open roles

Where
Columbia, MD
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCommercial Drone Reverse Engineer / Vulnerability ResearcherLeidos · Columbia, MD
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Leidos's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Leidos postings stay open a median of 7 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted yesterday

Leidos median: 7 days open

The posting

Who We Are:

Kudu Dynamics is a 100% employee-owned company, forged out of a decade of experience in computer network operations and staffed with talent who have built, overseen, and enhanced capabilities throughout the entire USG arsenal. Our team of hackers, engineers, makers, and shakers brings deep experience across research, development, deployment, and operations.

Kudu Dynamics is uniquely qualified to anticipate tomorrow’s threats and build the next generation of capabilities.

When you come in for your interview, you’ll see that Kudu is an amazing place to work, where you’ll be surrounded by experts who are ready to teach and learn. Our team has flexible work hours and work-from-home options. When we do work from the offices, we enjoy home-roasted coffee and award-winning workspaces.

We need help on a new project researching and developing advanced capabilities through vulnerability research, reverse engineering, and exploitation of commercial unmanned aircraft systems (UAS). The Commercial Drone Reverse Engineer / Vulnerability Researcher will investigate commercial drone hardware, firmware, embedded software, communications protocols, and supporting systems to identify vulnerabilities, characterize system behavior, and develop and demonstrate proof-of-concept capabilities. The candidate will contribute to the design and construction of lab-based experimental test harnesses, perform static and dynamic analysis, and develop tools and techniques to identify, validate, and exploit security weaknesses in complex embedded systems. This role calls for the creative application of multiple skill sets in a small, agile team that is working onsite at Aberdeen Proving Ground to develop and deliver advanced capabilities directly supporting the U.S. Army. Our program is interested in making breakthroughs on a very aggressive timeline and will involve working directly with reverse engineering, hardware, and vulnerability research teammates to determine exactly what these systems do in the real world and how their security assumptions can be challenged.

Responsibilities Include:

  • Conducting vulnerability research and reverse engineering of commercial drones, embedded firmware, flight controllers, and supporting software
  • Identifying, analyzing, and validating software and hardware vulnerabilities, including developing proof-of-concept exploits
  • Performing static and dynamic analysis of embedded firmware, binaries, and communications protocols
  • Investigating command and control, telemetry, navigation, and other interfaces to identify security-relevant behaviors and attack surfaces
  • Discovering interesting edge cases, undocumented functionality, and exploitable conditions (including designing experiments specifically targeted at teasing these out)
  • Designing and assembling hardware and software test harnesses for lab-based experimentation, debugging, and vulnerability validation
  • Developing and adapting tools for firmware analysis, fuzzing, debugging, instrumentation, and automated vulnerability discovery
  • Researching system security mechanisms, including authentication, encryption, secure boot, firmware updates, and hardware protections
  • Scripting/automating reverse engineering, testing, and experimental activities where possible
  • Developing and demonstrating proof-of-concept capabilities in controlled laboratory environments
  • Critically analyzing, interpreting, documenting, and communicating technical findings and experimental results

Minimum Qualifications:

  • Active TS/SCI security clearance
  • Ability to work onsite at Aberdeen Proving Ground, Maryland
  • Degree in computer science, computer engineering, electrical engineering, or equivalent hands-on experience
  • Demonstrated experience with software or firmware reverse engineering, particularly embedded systems
  • Experience identifying, analyzing, and validating software vulnerabilities, including developing proof-of-concept exploits
  • Strong programming and scripting experience in Python and/or C/C++
  • Experience with reverse engineering and debugging tools such as Ghidra, IDA Pro, Binary Ninja, GDB, or equivalent
  • Familiarity with embedded processor architectures, assembly language, memory management, and low-level software analysis
  • Knowledge of common software vulnerability classes, memory corruption, input validation weaknesses, and vulnerability research techniques
  • Experience analyzing unfamiliar software or hardware systems to understand functionality, identify attack surfaces, and develop original research approaches
  • Ability to independently design experiments, troubleshoot complex problems, and communicate technical findings

Nice-to-have Qualifications:

  • Experience with vulnerability research or reverse engineering of commercial drones, unmanned aircraft systems, or other complex embedded platforms
  • Experience with binary exploitation, exploit development, fuzzing, and vulnerability discovery automation
  • Familiarity with ARM, RISC-V, or other embedded processor architectures
  • Experience with embedded Linux, real-time operating systems (RTOS), bootloaders, and firmware update mechanisms
  • Experience with firmware extraction, flash memory analysis, and hardware-assisted reverse engineering
  • Familiarity with hardware debugging interfaces such as JTAG, SWD, UART, SPI, I2C, and CAN
  • Experience with hardware instrumentation, including oscilloscopes, logic analyzers, spectrum analyzers, and software-defined radios
  • Knowledge of wireless communications, RF analysis, digital signal processing, and proprietary communications protocols
  • Familiarity with drone communications protocols, including MAVLink, Wi-Fi, Bluetooth, and proprietary command and control links
  • Familiarity with GNSS, inertial navigation, sensor fusion, and flight control systems
  • Experience reverse engineering mobile applications, ground control stations, or cloud-connected embedded systems
  • Experience with MATLAB, GNU Radio, or similar signal processing and modeling tools
  • Experience with analog and digital circuit design, physical prototyping, and lab-based experimental test harnesses
  • Experience supporting U.S. Government or Department of Defense research and development programs

Security Clearance: Active TS/SCI Required

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

October 26, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Leidos's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Leidos's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Leidos's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.