Cyber Reverse Engineer

CACI • Sterling, VA

8d

About The Position

Join CACI’s team addressing national security cyber and hardware challenges through cyber reverse engineering and vulnerability research. The role investigates embedded software and hardware devices, digital communication implementations, and embedded binaries for protocol vulnerabilities in a fast-paced, interdisciplinary research and development environment. The candidate will work independently and collaboratively, communicate findings to technical and non-technical audiences, and support customer missions. The position is contingent on funding and may not be filled immediately; applicants may also be considered for other CACI positions.

Requirements

• Active Top Secret clearance with the ability to obtain SCI.
• Bachelor of Science degree in Computer Science, Software Engineering, Computer Engineering, or Electrical Engineering.
• At least 5 years of relevant work experience.
• Experience analyzing and reverse engineering Assembly binaries (x86 and/or ARM, AVR).
• Experience with scripting languages such as Python and Unix shell scripts.
• Experience using virtualization technologies such as VMware, VirtualBox, and Docker.
• Experience using binary analysis tools such as IDA Pro, Ghidra, WinDbg, and Binary Ninja.
• Experience reverse engineering embedded firmware images.
• Experience with user- or system-level emulation tools such as QEMU.
• Ability to work effectively independently and as part of a team, with strong communication skills and technical acumen.

Nice To Haves

• Understanding of software development using C/C++ for Linux and/or Windows systems.
• Active TS/SCI or TS/SCI Polygraph clearance.
• Understanding of embedded firmware development for various microcontroller families.
• Understanding of binary analysis techniques for identifying functionality and vulnerabilities in applications, embedded firmware, systems, and communications.
• Understanding of memory management concepts, including heap, stack, and virtual memory.
• Familiarity with encryption and hashing methods and algorithms such as 3DES, AES, RSA, MD5, SHA, and CRC.
• Background in ethical hacking and/or software vulnerability testing, with knowledge of techniques and tools such as memory corruption exploits, buffer overflows, rootkits, protocol poisoning, Metasploit, and Nmap.
• Reverse engineering certifications such as GIAC Reverse Engineering Malware (GREM).
• Cybersecurity certifications such as OSCP, OSED, or Security+.

Responsibilities

• Analyze and reverse engineer software binaries and embedded firmware on traditional and embedded systems to identify functional behavior.
• Conduct code reviews and vulnerability analyses of software and firmware to identify potential weaknesses or access vectors.
• Perform protocol analysis of communication channels.
• Perform static and dynamic software and firmware analysis using tools such as IDA Pro, Ghidra, x64Dbd, GDB, and Sysinternals.
• Perform pattern analysis to identify critical information.
• Draft and deliver technical reports describing the scope, nature, and characteristics of assessed software and firmware to technical and non-technical audiences.
• Brief the customer and document analysis findings accurately.

Benefits

• Flexible time off benefit.
• Learning resources and learning and development opportunities.
• Bonus compensation plans.
• Paid cyber events and training, including Capture the Flag events.
• Internal Research and Development opportunities.
• Prepaid courses for nationally recognized certification courses.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior