STR is hiring aSenior Reverse Engineerwho has a passion for research and analysis of vulnerabilities in cyber physical systems. Work must be performed onsite.Â
What you'll do:Â
- Reverse engineering complex software or firmware targets, ranging from typical Windows/Linux binaries to embedded firmware running non-traditional computer architectures and operating systems
- Developing and applying automated reverse engineering and binary analysis tools to characterize protocols, interfaces, and functionality of target systems
- Working in multi-discipline teams to develop innovative offensive cyber solutions to challenging problems from a wide variety of technologiesÂ
- Performing vulnerability weaponization, exploit development, payload development, and exploit mitigation on a variety of challenging targetsÂ
- Documenting, demonstrating, and presenting researchÂ
- Solving real world problems that have an impact on national security
Who you are:Â
- This position requires the ability to obtain anActive Top Secret (TS) security clearance, for which U.S. citizenship is needed by the U.S. GovernmentÂ
- Bachelors Degree in Computer Science, Computer Engineering, Cybersecurity or related field plus a minimum of 5 years relevant experienceÂ
(MS or PhD with equivalent work experience may also be considered)Â - Experience with binary analysis of software/firmwareÂ
- Experience with disassembly tools, such as IDA Pro, Binary Ninja, or GhidraÂ
- Proficiency in one or more programming languages: C/C++, Python, etc.Â
- Proficiency in one or more Assembly Languages: x86, ARM, etc.Â
- General understanding of reverse engineering fundamentals: memory layout, calling conventions, etc.Â
Nice to haves:Â
- Vulnerability research and analysis
- Knowledge of weaponizing discovered vulnerabilities into exploitsÂ
- Implant or software patch developmentÂ
- Familiarity with binary emulation or vulnerability research, including tools such as QEMU or AFL++Â
- Experience with DSP architectures, such as Texas Instruments, STMicroelectronics, NXP, or Analog Devices.Â
- Knowledge of operating system internals including memory/process/thread managementÂ
- Embedded systems or firmware analysisÂ
- Experience development custom emulation tools to enable dynamic analysisÂ
- Disassembler/decompiler module developmentÂ
- Experience analyzing and reconstructing code/data flowÂ
- Automated reverse engineering or software analysis tool developmentÂ
- Experience debugging software without source codeÂ
- Knowledge of binary file structures and formatsÂ
- Experience analyzing protocols or message structuresÂ
- Knowledge of anti-reverse engineering techniquesÂ
- Knowledge of intrusion detection and anti-malware systems and techniques
Pay Information
Full-Time Salary Range: $134,000 - $184,000
The salary range listed is based on external market data. Offers are based on factors, such as but not limited to, the candidate's experience, education, training, key skills/critical skills, security clearances, and prevailing market and business conditions.