Vulnerability Researcher for Embedded Devices

Successful candidates will bring extensive hands-on experience designing, developing, and deploying tools at the intersection of command and control, persistence, and networking.

This role is suited for highly experienced security researchers who are comfortable working at the lowest levels of software and system analysis, including reverse engineering compiled programs, analyzing assembly, and developing custom research capabilities., * TS/SCI Clearance is mandatory

• Highly experienced with reverse engineering compiled programs (C/C++).
• Highly experienced in reading common assembly languages, including x86, x86-64, and ARM.
• Experience developing in scripting languages, including Python.
• Experience working with debuggers and decompilers such as gdb, Binja, and IDA Pro.

Desired Qualifications

• Experience developing/defeating mitigations, including ASLR, DEP, N^X.
• Experience developing defeats of common anti-RE techniques, including obfuscation.
• Detailed understanding of embedded platforms (FPGA, physical memory).
• Experience securely implementing cryptographic primitives, including AES-GCM, SHA256, ECDSA.
• Experience with program analysis tools and techniques, including control flow, program slicing, and taint tracing.
• Effective use of automated analysis, including fuzzers, emulation, and sandbox.
• Deep knowledge of file systems and formats, including ELF, PE, and Mach-O.
• Strong ability to communicate effectively with customers and teammates.

Application Question(s):

• Do you have professional experience reading and analyzing x86, x86-64, and/or ARM assembly?
• Do you have extensive professional experience reverse engineering compiled C/C++ programs?
• Do you have hands-on professional experience using reverse engineering and debugging tools such as IDA Pro, Binja, or gdb?