Job Summary:
STR is a growing technology company specializing in advanced research and development for defense, intelligence, and national security. They are hiring a Senior Reverse Engineer who will focus on reverse engineering complex software and firmware, developing automated tools, and solving real-world problems impacting national security.
Responsibilities:
• Reverse engineering complex software or firmware targets, ranging from typical Windows/Linux binaries to embedded firmware running non-traditional computer architectures and operating systems
• Developing and applying automated reverse engineering and binary analysis tools to characterize protocols, interfaces, and functionality of target systems
• Working in multi-discipline teams to develop innovative offensive cyber solutions to challenging problems from a wide variety of technologies
• Performing vulnerability weaponization, exploit development, payload development, and exploit mitigation on a variety of challenging targets
• Documenting, demonstrating, and presenting research
• Solving real world problems that have an impact on national security
Qualifications:
Required:
• The ability to obtain an Active Top Secret (TS) security clearance, for which U.S. citizenship is needed by the U.S. Government
• Bachelors Degree in Computer Science, Computer Engineering, Cybersecurity or related field plus a minimum of 5 years relevant experience (MS or PhD with equivalent work experience may also be considered)
• Experience with binary analysis of software/firmware
• Experience with disassembly tools, such as IDA Pro, Binary Ninja, or Ghidra
• Proficiency in one or more programming languages: C/C++, Python, etc.
• Proficiency in one or more Assembly Languages: x86, ARM, etc.
• General understanding of reverse engineering fundamentals: memory layout, calling conventions, etc.
Preferred:
• Vulnerability research and analysis
• Knowledge of weaponizing discovered vulnerabilities into exploits
• Implant or software patch development
• Familiarity with binary emulation or vulnerability research, including tools such as QEMU or AFL++
• Experience with DSP architectures, such as Texas Instruments, STMicroelectronics, NXP, or Analog Devices.
• Knowledge of operating system internals including memory/process/thread management
• Embedded systems or firmware analysis
• Experience development custom emulation tools to enable dynamic analysis
• Disassembler/decompiler module development
• Experience analyzing and reconstructing code/data flow
• Automated reverse engineering or software analysis tool development
• Experience debugging software without source code
• Knowledge of binary file structures and formats
• Experience analyzing protocols or message structures
• Knowledge of anti-reverse engineering techniques
• Knowledge of intrusion detection and anti-malware systems and techniques
Company:
STR is built on people & technology platforms tackling tough problems in cybersecurity, distributed sensing & artificial. Founded in 2010, the company is headquartered in Woburn, USA, with a team of 501-1000 employees. The company is currently Late Stage.