> Markdown version of [/jobs/ext/1429838-cno-software-engineer-os-hypervisor-uefi-bios-specialist](https://www.wearedevelopers.com/jobs/ext/1429838-cno-software-engineer-os-hypervisor-uefi-bios-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CNO Software Engineer - OS, Hypervisor, UEFI/BIOS Specialist - **Company:** Draper Labs - **Location:** Reston, VA, United States - **Experience:** Experienced - **Salary:** $75,000.0 - $156,000.0 - **Contract:** Permanent contract - **Skills:** C (Programming Language), Microsoft Windows, BIOS, Booting (BIOS), C++ (Programming Language), Cyber Security, Linux, Memory Management, Emulators, Firmware, Hypervisor, Python (Programming Language), Real-Time Operating Systems, Reverse Engineering, Software Engineering, Software Systems, Rust (Programming Language), Extensible Firmware Interface, Build Tools, Software Version Control, Golang, Programming Languages - **Published:** July 24, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/10936994?backUrl=%2Fcareer%2F10936994%2FCno-Software-Engineer-Os-Hypervisor-Uefi-Specialist-Virginia-Reston ## About the Role * Curiosity-driven approach to solving complex, customer-driven problems as part of a multi-disciplinary team * Collaborate and communicate effectively and openly with multi-disciplinary program team members, program leadership, and non-technical personnel * Be a team player able to work in a fast-paced environment with the ability to balance multiple competing tasks and demands. Experience 3-5 years experience in Cybersecurity or related field is required, * Proficiency in developing kernel modules, drivers, or firmware for Windows, GNU/Linux, RTOS, or UEFI/BIOS. * Proficiency in implementing hypervisor internals, including VM lifecycle management and hardware emulation. * Proficiency in crafting custom bootloaders or firmware instrumentation for forensic data collection (e.g. UEFI). * Proficiency in techniques that prevent reverse engineering and employ obfuscation or diversification. System and Architecture: * Proficiency with core workings of operating systems (user mode, kernel mode, boot processes), particularly in Windows, GNU/Linux, or RTOS contexts. * Proficiency in analyzing OS internals for forensic evidence extraction. * Proficiency in reverse engineering closed-source hypervisors, firmware, or OS components to uncover system artifacts. * Proficiency in dissecting memory management, interrupt handling, and system calls for forensic traces or anomaly detection. Forensics and Incident Response: * Proficiency in capturing and analyzing memory dumps, crash reports, runtime logs from OS and hypervisor environments. * Proficiency in BIOS/UEFI forensic analysis, focusing on firmware modifications, bootkits, or tampered configurations. * Proficiency in utilizing system internals to identify persistence mechanism, hidden processes, or kernel-level rootkits. Languages and Development: * Proficiency with programming languages and their build systems such as: C, C++, Python, GoLang, Rust. * Proficiency with software version control systems. Leadership and Business: * Successful history in authoring of technical proposals and documents. * Leadership in advanced R&D initiatives, including government-funded projects. * Leadership of critical programs with more than two full time staff members. * Proficient in teamwork and communication with diverse audiences. ## Description * Assess hardware and software for security vulnerabilities using a breadth of technologies and techniques. * Develop software that meets behavior and security requirements for tailored applications. * Integrate software capabilities with other tasks or groups to improve performance or behavior requirements. * Create new tools and systems to detect and exploit vulnerabilities and system weaknesses. * Document nominal application and system functionality, in addition to implemented changes. * Help define the analysis approach for a particular problem and independently execute assignments * Contribute high quality content for technical reports and presentations with minimal guidance * Proactively identify needs and concerns associated with design decisions and communicate them to project leadership * Performs other related duties as assigned. ## Related Videos - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [10M Data Records Lost, Underwater Computing, and Psychedelic Fish - Matthias Geniar](https://www.wearedevelopers.com/videos/1908-10m-data-records-lost-underwater-computing-and-psychedelic-fish-matthias-geniar) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [How to Submit CFPs and Get into Public Speaking - Moran Weber](https://www.wearedevelopers.com/videos/2112-how-to-submit-cfps-and-get-into-public-speaking-moran-weber) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023)