Associate Reverse Engineer Researcher

Software Engineering Institute | Carnegie Mellon University • Pittsburgh, PA

73d

About The Position

The CERT Division of Carnegie Mellon University's Software Engineering Institute (SEI) is seeking a Reverse Engineer Researcher for its Threat Analysis directorate. The SEI is a federally funded research and development center that works with defense and government organizations, industry, and academia to improve software-intensive systems and software engineering capabilities.

The researcher reverse engineers malicious code for high-impact customers, develops analysis methods and tools, and helps identify and address emerging and complex security threats. The role also explores the use of artificial intelligence in reverse engineering and applies reverse engineering practices to AI systems. Results are documented and transitioned through reports, presentations, and technical exchanges, with participation in the broader security community through collaboration and technical publications.

The position is based in Pittsburgh, Pennsylvania, and involves moderate travel (15%) to sponsor sites, conferences, and offsite meetings. The employee will be subject to a background check and must obtain and maintain an active Department of War security clearance.

Requirements

• Bachelor's degree in Computer Science or a related discipline and three years of experience, or a master's degree in the same fields and one year of experience.
• Experience with or knowledge of reverse engineering software binaries across a variety of architectures at user and kernel levels.
• Experience with or knowledge of static analysis tools such as IDA Pro, NSA Ghidra, or Binary Ninja.
• Experience with or knowledge of user-level and kernel-level debuggers such as x32dbg, x64dbg, gdb, or WinDbg.
• Experience with or knowledge of native programming languages such as C/C++ and high-level languages such as Java, Python, or GoLang.
• Experience with or knowledge of software engineering and design concepts, firmware and device driver development, malware tradecraft, threat actor tactics, techniques, and procedures, malware signature creation, operating system concepts and internals, and binary file formats such as PE, ELF, and Mach-O.
• Experience with or knowledge of Internet protocols and network analysis tools such as Wireshark and netcat; compiler theory, cryptography, and malware deobfuscation techniques; mobile device development and reverse engineering; malware sandboxes or instrumentation frameworks such as Frida, QEMU, or Unicorn Engine; and artificial intelligence and machine learning, including their use in reverse engineering and malware analysis.
• Analytical mindset and deep curiosity about how software works.
• Ability to balance rapid prototyping with maintainable tool development.
• Strong technical writing experience and effective communication with technical and non-technical audiences.
• Ability to handle confidential and sensitive information appropriately and manage continually shifting priorities.
• Willingness to travel to various locations in support of the SEI's mission; moderate travel (15%).
• Ability to obtain and maintain an active Department of War security clearance and pass a background check.

Responsibilities

• Perform in-depth reverse engineering of malicious code for high-impact customers.
• Document and transition reverse engineering results through reports, presentations, and technical exchanges.
• Explore ways to use artificial intelligence to support reverse engineering and apply reverse engineering practices to AI systems.
• Design, prototype, and transition new analysis methods and tools.
• Identify and document emerging and complex active security threats.
• Participate in the broader security community through collaboration, papers, and presentations.
• Travel to sponsor sites, conferences, and offsite meetings on occasion to support the SEI's mission.
• Mentor and train others and share knowledge.

Benefits

• 8% monthly retirement contribution without requiring an employee contribution.
• Tuition benefits at CMU and other institutions for employees and their dependent children.
• Flexible work arrangements and paid parental and military leave.
• Access to university resources, including mindfulness programs, childcare and backup care benefits, a monthly WMATA transit benefit, and free transportation on the Pittsburgh Regional Transit System.
• Annual professional development opportunities, including conferences, training, certifications, and reimbursement for professional society memberships.
• Relocation assistance.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level