Cyber Systems Exploitation Researcher ( Fort Meade, MD)

The Cyber System Assessments Group performs software and hardware reverse engineering, vulnerability research and discovery, and system exploitation. We develop and prototype cutting-edge capabilities for our operational partners in the U.S. government. We look for, find, and demonstrate cyber vulnerabilities so that vulnerabilities in U.S. systems can be corrected, and so that vulnerabilities in other systems are better understood. Top U.S. Government leadership relies on us for our expert guidance, and our technical role with our U.S. Government sponsors is considered essential to the success of their missions., * Owns and executes discrete design and development tasks such as data analyses, programming, designs, tests, models, simulations, or integration tasks within broader project or program efforts.

• Applies relevant technical knowledge to solve less-defined and moderately complex problems, independently identifying appropriate methods and adapts existing approaches as needed.
• May contribute to system, subsystem, or component-level development activities that may span multiple disciplines, mission needs, products, or technical focus areas.
• Develops, reviews, and contributes to technical documentation, program reporting, data analyses, design materials, and presentations based on ambiguous policies and procedures.
• Collaborates with project team members to ensure milestones, assumptions, dependencies, and technical risks are understood and addressed.
• Begins to provide practical guidance to less experienced staff by explaining technical concepts, sharing methods, and reviewing selected work products for accuracy, providing feedback as needed.
• Consistently demonstrates initiative by seeking opportunities to lead new assignments and improve technical approaches, while continuously deepening mission-aligned engineering expertise.

Additional Job Duties & Responsibilities

• Contribute to the development of cyber security tools and techniques.
• Reverse engineer and exploit software and hardware systems important to U.S. government operations and critical to the defense of our nation.
• Conduct research in cyber tool prototyping and technical analysis of offensive or defensive cyber tools and systems, automated vulnerability discovery, reverse engineering, software protection mechanisms, static analysis, and dynamic instrumentation.
• Communicate research to non-domain experts through writing, public presentations, and hands-on training sessions., * Version control systems (Git)
• Disassemblers/decompilers (Ghidra, IDA Pro)
• Debuggers (WinDbg, GDB)
• Programming languages (C/C++, Python)
• Infrastructure/container provisioning and orchestration (Ansible, Kubernetes, Docker)
• Network protocol analysis (Wireshark, tcpdump)
• Emulation/virtualization (VMware, QEMU)
• Operating system internals
• Reverse engineering of embedded systems firmware, malicious code, mobile applications, and more
• Vulnerability assessment
• Statistics and metrics
• SAT/SMT solvers
• Symbolic execution
• Data-flow analysis for compiled binaries

As a successful Level 3 Associate Staff, you will have solid technical depth, sound judgment, and the initiative to work independently on less-defined assignments. You will adapt established approaches, own discrete project/program components of technical work, contribute to program documentation and reporting, and collaborate with project/program teams across the Laboratory. Your work will include multiple activities such as hardware and software development, systems analysis, data analysis, component fabrication, system integration, testing, and documentation., * Bachelor’s degree in a STEM discipline or other relevant technical field and typically 2+ years of relevant experience; or Master’s degree and typically 0+ years of relevant experience; or equivalent combination of education and experience.

• Solid technical depth in a primary engineering, research, or other technical domain with ability to apply knowledge independently.
• Demonstrated ability to solve complex technical problems and manage components of project work.
• Experience contributing to technical documentation, analyses, reports, presentations, or project deliverables.
• Ability to collaborate across project teams and communicate technical information clearly to appropriate audiences.
• Emerging ability to guide less experienced colleagues and contribute to team capability development.

• Binary intermediate representations
• Binary translation
• Compiler construction
• Anti-debugging/anti-instrumentation techniques
• Network and host security products

Associate Staff 3 Hiring Range: $114,000 - $148,000

Disclaimer: MIT Lincoln Laboratory provides a typical hiring range as a good faith estimate of what we reasonably expect to offer for this position at the time of posting. The final salary offered to a selected candidate will depend on various factors, including-but not limited to-the scope and responsibilities of the role, the candidate’s experience, skills and education/training, internal equity considerations and applicable legal requirements. This range reflects base salary only and does not include additional forms of compensation or benefits.

At MIT Lincoln Laboratory, our exceptional career opportunities include many outstanding benefits to help you stay healthy, feel supported, and enjoy a fulfilling work-life balance. Benefits offered to employees include:

• Comprehensive health, dental, and vision plans
• MIT-funded pension
• Matching 401K
• Paid leave (including vacation, sick, parental, military, etc.)
• Tuition reimbursement and continuing education programs
• Mentorship programs
• A range of work-life balance options
• … and much more!

Please visit our Benefits page for more information. As an employee of MIT, you can also take advantage of other voluntary benefits, discounts and perks .

Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret level DoD security clearance.