Associate Reverse Engineer Researcher

Carnegie Mellon University • Pittsburgh, PA

15h

About The Position

The CERT Division of Carnegie Mellon University's Software Engineering Institute (SEI) is seeking a Reverse Engineer Researcher for its Threat Analysis directorate. The SEI is a federally funded research and development center that works with defense and government organizations, industry, and academia to improve software-intensive systems and software engineering capabilities.

The researcher reverse engineers malicious code for high-impact customers, develops and transitions analysis methods and tools, and identifies emerging and complex security threats. The role also explores how artificial intelligence can support reverse engineering and applies reverse engineering practices to AI systems. The researcher documents and shares results through reports, presentations, technical exchanges, papers, and collaboration with the broader security community.

The position is based in Pittsburgh, Pennsylvania, with moderate travel (15%) to sponsor sites, conferences, and offsite meetings. The successful applicant will be subject to a background check and must obtain and maintain an active Department of War security clearance.

Requirements

• Bachelor's degree in computer science or a related discipline and three years of experience, or a master's degree in the same fields and one year of experience.
• Experience with or knowledge of reverse engineering software binaries across a variety of architectures, at both user and kernel levels.
• Experience with or knowledge of static analysis tools such as IDA Pro, NSA Ghidra, or Binary Ninja.
• Experience with or knowledge of user-level and kernel-level debuggers such as x32dbg, x64dbg, gdb, or WinDbg.
• Experience with or knowledge of native programming languages such as C/C++ and high-level languages such as Java, Python, or GoLang.
• Experience with or knowledge of software engineering and design concepts.
• Experience with or knowledge of firmware and device driver development.
• Experience with or knowledge of malware tradecraft and threat actor tactics, techniques, and procedures (TTPs).
• Experience with or knowledge of malware signature creation and use, independent of detection technology.
• Experience with or knowledge of operating system concepts and internals and binary file formats such as PE, ELF, and Mach-O.
• Experience with or knowledge of Internet protocols and network analysis tools such as Wireshark and netcat.
• Experience with or knowledge of compiler theory, cryptography, and malware deobfuscation techniques.
• Experience with or knowledge of mobile device development and reverse engineering.
• Experience with or knowledge of malware sandboxes or instrumentation frameworks such as Frida, QEMU, or Unicorn Engine.
• General understanding and experience in artificial intelligence and machine learning, including using AI to support reverse engineering and malware analysis.
• Strong technical writing experience and effective communication with technical and non-technical audiences.
• Ability to handle confidential and sensitive information appropriately and adapt to continually shifting priorities.
• Willingness to travel to various locations to support the SEI's mission.
• Must pass a background check and obtain and maintain an active Department of War security clearance.

Responsibilities

• Perform in-depth reverse engineering of malicious code for high-impact customers.
• Document and transition findings through reports, presentations, and technical exchanges.
• Design, prototype, develop, and transition new analysis methods and tools.
• Explore the use of artificial intelligence to support reverse engineering and apply reverse engineering practices to AI systems.
• Identify and document emerging and complex active security threats.
• Participate in the broader security community through collaboration, papers, and presentations.
• Travel to sponsor sites, conferences, and offsite meetings as needed to support the SEI's mission.

Benefits

• 8% monthly retirement contribution without an employee contribution requirement.
• Tuition benefits at CMU and other institutions for the employee and dependent children.
• Flexible work arrangements.
• Paid parental and military leave.
• Access to university resources, including mindfulness programs, childcare and backup care benefits, and a monthly WMATA transit benefit.
• Free transportation on the Pittsburgh Regional Transit System.
• Annual professional development opportunities, including conferences, training, and certifications.
• Reimbursement for membership in professional societies.
• Relocation assistance.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level