Hardware Reverse Engineer SME

• Conduct comprehensive hardware reverse engineering of OT and ICS devices.
• Analyze network-edge devices and embedded systems compromised by advanced threats.
• Perform deep-dive analysis of proprietary hardware targeted by adversaries.
• Conduct:
• Reverse engineering
• Failure analysis
• Vulnerability analysis
• Research techniques to:
• Understand complex hardware systems
• Assess the functionality of components
• Identify exploitation risks
• Identify and extract deeply embedded malware from hardware components.
• Reverse engineer firmware and low-level software on embedded devices.
• Utilize/enhance KI2 system emulation capabilities for hardware analysis.
• Document exploitation methodologies and defensive countermeasures.
• Develop standard operating procedures for hardware forensics workflows.
• Train Cybersecurity Division analysts on hardware reverse engineering techniques.
• Provide expert consultation on edge device security and vulnerabilities.
• Support forensic investigations in environments lacking EDR visibility.
• Analyze proprietary communication protocols and embedded systems functions.
• Identify:
• Hardware backdoors
• Implants
• Malicious modifications
• Collaborate with electrical engineers on chip-off forensics procedures.
• Provide reach-back support to operational analysts during active investigations.
• Contribute to research initiatives on emerging hardware threats.
• Document technical findings and intelligence for stakeholder dissemination.

• Bachelor’s degree in Electrical Engineering, Computer Engineering, or related discipline
• Active TS/SCI clearance.
• Ability to obtain DHS Suitability.
• 10+ years of experience in hardware reverse engineering or embedded systems analysis.
• Deep expertise in OT/ICS hardware platforms and vulnerabilities.
• Ability to analyze novel or proprietary systems with limited documentation.
• Strong communication skills for explaining complex technical findings.
• Experience collaborating in research-oriented environments.
• Strong experience with firmware reverse engineering and analysis.
• Proficiency with reverse engineering tools (e.g., IDA Pro, Ghidra, Binary Ninja).
• Deep understanding of embedded processor architectures (ARM, MIPS, PowerPC).
• Experience analyzing network-edge devices (routers, switches, firewalls, IoT devices).
• Knowledge of hardware debugging interfaces (JTAG, SWD, UART).
• Strong programming and scripting skills (Python, C, Assembly).
• Understanding of exploitation techniques targeting embedded systems.

• Experience with malware analysis in hardware/firmware contexts. Desired:

• Experience supporting federal cybersecurity or critical infrastructure protection programs.
• Experience in hardware reverse engineering tasks (inspection, imaging, decapsulation, deprocessing) in a microelectronics exploitation laboratory.
• Background in offensive security or penetration testing of OT environments.
• Advanced certifications in reverse engineering (e.g., GREM, GXPN).
• Experience with SCADA, PLC, RTU, and other industrial control components.
• Knowledge of critical infrastructure sector technologies (energy, utilities, manufacturing).
• Familiarity with supply chain security and hardware implant detection.
• Experience with system emulation platforms and virtual hardware analysis.
• Understanding of threat actor TTPs targeting OT and edge devices.
• Background in electronics manufacturing or hardware security research.
• Experience with chip decapsulation and invasive hardware analysis techniques.
• Master’s degree or PhD preferred
• DoD 8140.01 IAT Level III
• PMP

*Exact compensation may vary based on several factors, including skills, experience, and education. Employees in this role will enjoy a comprehensive benefits package starting on day one of employment, including options for medical, dental, and vision insurance. Eligibility to enroll in the 401(k) retirement plan begins after 90 days of employment. Additionally, employees in this role will have access to paid sick leave and other paid time off benefits as required under the applicable law of the worksite location.