Windows CNO Developer

M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations who desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include digital transformation, software development, cloud migration, applications & infrastructure, cybersecurity, data delivery & analytics, and IT talent solutions.

M9 Solutions is seeking a Windows CNO Developer to work on-site in support of a government contract for a client located in Arlington, VA. An active TS/SCI clearance is required.

Responsibilities

• Research, identify, and characterize Windows kernel vulnerabilities, including privilege escalation, sandbox escapes, and persistence mechanisms.

• Design, develop, and maintain CNO/CNE tools and capabilities targeting Windows platforms (kernel and user mode), from proof‐of‐concept to operational‐grade capability.

• Perform advanced reverse engineering of Windows binaries, drivers, and system components to understand behavior, exploitability, and mitigation paths using tools like IDA Pro, Ghidra, and WinDbg.

• Develop kernel‐mode and user‐mode code in C/C++ and Assembly to implement implants, loaders, and exploit chains, with a focus on reliability and stealth.

• Create and test exploitation techniques for complex Windows targets, including bypasses for modern protections (ASLR, DEP, CFG, kernel mitigations), in partnership with cyber research teams.

• Integrate CNO capabilities into mission frameworks and tasking/dataflow pipelines, including configuration, logging, and secure communications.

• Conduct debugging and troubleshooting of low‐level software in lab and operational‐like environments, including crash triage and performance analysis.

• Collaborate closely with analysts, operators, and other engineers to align capabilities with mission requirements and provide technical guidance on feasibility and trade‐offs.

• Produce clear technical documentation (designs, CONOPs, usage guides) and contribute to secure coding standards and internal best practices.

Required Skills and Qualifications

• Active TS/SCI clearance.

• 7–10+ years of professional software development focused on low‐level or systems programming, with significant experience on Windows.

• Demonstrated, hands‐on Windows kernel vulnerability research experience: analyzing kernel internals, developing PoCs, and understanding exploitability and mitigations.

• Strong proficiency in C and C++, plus experience with Python for tooling/automation and x86/x64 Assembly for exploit and implant development.

• Deep understanding of Windows internals (kernel architecture, memory management, process/thread model, I/O, driver model, security mechanisms, and Windows APIs).

• Experience with reverse engineering tools such as IDA Pro, Ghidra, WinDbg, x64dbg, or similar, and comfort reading disassembly and decompiled code.

• Solid knowledge of networking protocols (TCP/IP, HTTP(S), DNS) and socket programming relevant to CNE tool communications and C2 channels.

• Experience with secure software development lifecycle: design, develop, test, debug, document, and maintain complex codebases, preferably in Agile teams.

• Familiarity with version control (Git) and modern dev toolchains (Visual Studio, CMake, CI workflows).

Preferred Skills and Qualifications

• Prior work developing CNO/CNE capabilities.

• Experience evading host and network defenses (EDR/AV, IDS/IPS) and building resiliency/OPSEC into tooling.

• Experience with other platforms (Linux, mobile, or embedded) and cross‐platform CNO development.

Full-Time Employee Compensation

• M9 Solutions’ pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include, but are not limited to, responsibilities of the position, education, experience, knowledge, skills, abilities, as well as internal equity, location, alignment with market data, applicable bargaining agreement (if any), or other law.

• M9 Benefits - https://m9solutions.com/why-join-m9/#our-benefits

Salary Range
$60,000—$180,000 USD

M9 Solutions, LLC (M9) is a Federal contractor and we comply with all applicable federal laws prohibiting discrimination in employment, including Title VII of the Civil Rights Act of 1964. We also adhere to the affirmative action requirements of the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA) and Section 503 of the Rehabilitation Act, ensuring equal opportunity for veterans and individuals with disabilities. Please click here to complete M9's Voluntary Self-Identification Form and then email it to [email protected]. If you need accommodation during the application process or encounter difficulties using our website, please contact our Human Resources Department at [email protected] or 703-936-0880.

With 14+ years of proven delivery and steady growth, M9 Solutions is a unique small business with credible past performance and key capabilities offering project management services, solution architects, business analysts, program managers, technical architects, and technical consultants. M9 was recognized as an Inc. 5000 Fastest-Growing Private Companies in 2021, 2020, 2019, 2018, 2017, 2016, and 2012. M9 Solutions believes that work should be fun, rewarding, and something everyone can be excited about. We offer a competitive compensation package and value diversity in driving the vision of the company.