Offensive and defensive cyber operations for DoD and federal agencies
CNF develops cyber weapon systems and defensive platforms for Department of Defense enterprises, with deep roots in government cyber operations—the founders helped establish AFCERT and the VA's incident response center. The tech stack reveals a heavy emphasis on Windows internals analysis (Ghidra, IDA Pro, Radare2, GDB) combined with Python and low-level systems languages (C/C++, Assembly, Rust), which aligns with their project focus on reverse engineering, vulnerability identification, and stealthy tool deployment. Engineering-heavy hiring (6 of 8 active roles) paired with finance operations signals a government contracting model where compliance and monthly reporting overhead matter as much as technical velocity.
CNF Technologies is a 51–200-person cybersecurity firm headquartered in San Antonio, Texas, founded in 2005 by veterans of the Air Force, NSA, and DoD cyber operations. The company specializes in offensive and defensive cyber technology development, malicious code analysis, intrusion prevention, incident response, vulnerability management, and forensics—primarily serving Department of Defense enterprises and federal law enforcement. Core offerings include rapid prototyping of cyber defense platforms, security testing, penetration testing, and support to Cyber Protection Teams. Operations span system integration, secure coding in classified environments, and physical and virtual test range development. The organization maintains steady hiring focused on engineering and finance roles, reflecting both technical delivery and the compliance/reporting burden of government contracts.
Primary stack includes Python, C/C++, C#, PowerShell, Rust, and Assembly. They also use specialized reverse-engineering and debugging tools: Ghidra, IDA Pro, Radare2, and GDB.
Key projects include reverse engineering Windows internals for vulnerability identification, developing advanced cyber tools for Windows environments, low-level component work for stealthy tool deployment, DevSecOps pipeline implementation, and prototype development for national security objectives.
Other companies in the same industry, closest in size