Commercial Drone Reverse Engineer / Vulnerability Researcher

Leidos•Columbia, MD

11d•$107,900 - $195,050•Onsite

About The Position

Kudu Dynamics is seeking a Commercial Drone Reverse Engineer / Vulnerability Researcher for a project researching and developing advanced capabilities through vulnerability research, reverse engineering, and exploitation of commercial unmanned aircraft systems (UAS). The role investigates drone hardware, firmware, embedded software, communications protocols, and supporting systems to identify vulnerabilities, characterize system behavior, and develop and demonstrate proof-of-concept capabilities. The candidate will contribute to designing and constructing laboratory experimental test harnesses, conduct static and dynamic analysis, and develop tools and techniques to identify, validate, and exploit security weaknesses in complex embedded systems. The role is part of a small, agile team working onsite at Aberdeen Proving Ground to develop and deliver advanced capabilities directly supporting the U.S. Army. The work involves close collaboration with reverse engineering, hardware, and vulnerability research teammates on an aggressive timeline. The posting describes Kudu Dynamics as a 100% employee-owned company with flexible work hours and work-from-home options, though this position specifically requires onsite work at Aberdeen Proving Ground. The posting also contains a Leidos recruiting statement and compensation information.

Requirements

Active TS/SCI security clearance.
Ability to work onsite at Aberdeen Proving Ground, Maryland.
Degree in computer science, computer engineering, electrical engineering, or equivalent hands-on experience.
Demonstrated experience with software or firmware reverse engineering, particularly embedded systems.
Experience identifying, analyzing, and validating software vulnerabilities, including developing proof-of-concept exploits.
Strong programming and scripting experience in Python and/or C/C++.
Experience with reverse engineering and debugging tools such as Ghidra, IDA Pro, Binary Ninja, GDB, or equivalent.
Familiarity with embedded processor architectures, assembly language, memory management, and low-level software analysis.
Knowledge of common software vulnerability classes, memory corruption, input validation weaknesses, and vulnerability research techniques.
Experience analyzing unfamiliar software or hardware systems to understand functionality, identify attack surfaces, and develop original research approaches.
Ability to independently design experiments, troubleshoot complex problems, and communicate technical findings.

Nice To Haves

Experience with vulnerability research or reverse engineering of commercial drones, unmanned aircraft systems, or other complex embedded platforms.
Experience with binary exploitation, exploit development, fuzzing, and vulnerability discovery automation.
Familiarity with ARM, RISC-V, or other embedded processor architectures.
Experience with embedded Linux, real-time operating systems (RTOS), bootloaders, and firmware update mechanisms.
Experience with firmware extraction, flash memory analysis, and hardware-assisted reverse engineering.
Familiarity with hardware debugging interfaces such as JTAG, SWD, UART, SPI, I2C, and CAN.
Experience with hardware instrumentation, including oscilloscopes, logic analyzers, spectrum analyzers, and software-defined radios.
Knowledge of wireless communications, RF analysis, digital signal processing, and proprietary communications protocols.
Familiarity with drone communications protocols, including MAVLink, Wi-Fi, Bluetooth, and proprietary command and control links.
Familiarity with GNSS, inertial navigation, sensor fusion, and flight control systems.
Experience reverse engineering mobile applications, ground control stations, or cloud-connected embedded systems.
Experience with MATLAB, GNU Radio, or similar signal processing and modeling tools.
Experience with analog and digital circuit design, physical prototyping, and laboratory experimental test harnesses.
Experience supporting U.S. Government or Department of Defense research and development programs.

Responsibilities

Conduct vulnerability research and reverse engineering of commercial drones, embedded firmware, flight controllers, and supporting software.
Identify, analyze, and validate software and hardware vulnerabilities, including developing proof-of-concept exploits.
Perform static and dynamic analysis of embedded firmware, binaries, and communications protocols.
Investigate command and control, telemetry, navigation, and other interfaces to identify security-relevant behaviors and attack surfaces.
Discover edge cases, undocumented functionality, and exploitable conditions, including designing experiments to reveal them.
Design and assemble hardware and software test harnesses for laboratory experimentation, debugging, and vulnerability validation.
Develop and adapt tools for firmware analysis, fuzzing, debugging, instrumentation, and automated vulnerability discovery.
Research system security mechanisms, including authentication, encryption, secure boot, firmware updates, and hardware protections.
Script and automate reverse engineering, testing, and experimental activities where possible.
Develop and demonstrate proof-of-concept capabilities in controlled laboratory environments.
Analyze, interpret, document, and communicate technical findings and experimental results.