STR is hiring aSenior Reverse Engineerwho has a passion for research and analysis of vulnerabilities in cyber physical systems. Work must be performed onsite.ย
Whatย you'llย do:ย
- Reverse engineering complex software or firmware targets, ranging from typical Windows/Linux binaries to embedded firmware running non-traditional computer architectures and operating systems
- Developing and applying automated reverse engineering and binary analysis tools to characterize protocols, interfaces, and functionality of target systems
- Working in multi-discipline teams to develop innovative offensive cyber solutions to challenging problems from a wide variety of technologiesย
- Performing vulnerability weaponization, exploit development, payload development, and exploit mitigation on a variety of challenging targetsย
- Documenting, demonstrating, and presenting researchย
- Solving real world problems that have an impact on national security
Who you are:ย
- This position requiresย the ability to obtainย anActive Top Secret (TS) security clearance, for which U.S. citizenship is needed by the U.S. Governmentย
- Bachelors Degree in Computer Science, Computer Engineering, Cybersecurity or related field plus a minimum of 5 years relevant experienceย
(MS or PhD with equivalent work experience may also be considered)ย - Experience with binary analysis of software/firmwareย
- Experience with disassembly tools, such as IDA Pro, Binary Ninja, or Ghidraย
- Proficiency in one or more programming languages: C/C++, Python, etc.ย
- Proficiency in one or more Assembly Languages: x86, ARM, etc.ย
- General understanding of reverse engineering fundamentals: memory layout, calling conventions, etc.ย
Nice to haves:ย
- Vulnerability research and analysis
- Knowledge of weaponizing discovered vulnerabilities into exploitsย
- Implant or software patch developmentย
- Familiarity with binary emulation or vulnerability research, including tools such as QEMU or AFL++ย
- Experience with DSP architectures, such as Texas Instruments, STMicroelectronics, NXP, or Analog Devices.ย
- Knowledge of operating system internals including memory/process/thread managementย
- Embedded systems or firmware analysisย
- Experience development custom emulation tools to enable dynamic analysisย
- Disassembler/decompiler module developmentย
- Experience analyzing and reconstructing code/data flowย
- Automated reverse engineering or software analysis tool developmentย
- Experience debugging software without source codeย
- Knowledge of binary file structures and formatsย
- Experience analyzing protocols or message structuresย
- Knowledge of anti-reverse engineering techniquesย
- Knowledge of intrusion detection and anti-malware systems and techniques
Pay Information
Full-Time Salary Range: $134,000 - $184,000
The salary range listed is based on external market data. Offers are based on factors, such as but not limited to, the candidate's experience, education, training, key skills/critical skills, security clearances, and prevailing market and business conditions.