Cyber Reverse Engineer

Pacific Northwest National Laboratory•Richland, WA

5d•$140,200 - $228,800

About The Position

At PNNL, our core capabilities are divided among major departments that we refer to as Directorates within the Lab, focused on a specific area of scientific research or other function, with its own leadership team and dedicated budget. Our Science & Technology directorates include National Security, Earth and Biological Sciences, Physical and Computational Sciences, and Energy and Environment. In addition, we have an Environmental Molecular Sciences Laboratory, a Department of Energy, Office of Science user facility housed on the PNNL campus. The National Security Directorate (NSD) drives science-based, mission-focused solutions to take on complex, real-world threats to our nation and the world. The Emerging Threats and Technologies Division, part of the National Security Directorate, consists of over 400 scientists, engineers, and analysts with backgrounds in cyber, nuclear, intelligence, policy, data science, and other fields. We work in interdisciplinary project teams to provide innovative concepts that integrate policy, analytics, science, and technology into unique solutions.

Requirements

BS/BA and 5+ years of relevant work experience -OR- MS/MA and 3+ years of relevant work experience -OR- PhD with 1+ year of relevant experience
U.S. Citizenship
Ability to obtain and maintain a federal security clearance.
Background Investigation: Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter in accordance with 10 CFR 710, Appendix B.
Drug Testing: All Security Clearance positions are Testing Designated Positions, which means that the applicant selected for hire is subject to pre-employment drug testing, and post-employment random drug testing. In addition, applicants must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP).
Note: Applicants will be considered ineligible for security clearance processing by the U.S. Department of Energy if non-use of illegal drugs, including marijuana, for 12 months cannot be demonstrated.
Testing Designated Position: The candidate selected for this position will be subject to pre-employment and random drug testing for illegal drugs, including marijuana, consistent with the Controlled Substances Act and the PNNL Workplace Substance Abuse Program.
Mandatory Requirements: The Department of Energy (DOE) prohibits DOE employees and contractors from having any affiliation with the foreign government of a country DOE has identified as a “country of risk” without explicit approval by DOE and Battelle. If you are offered a position at PNNL and currently have any affiliation with the government of one of these countries, you will be required to disclose this information and recuse yourself of that affiliation or receive approval from DOE and Battelle prior to your first day of employment.

Nice To Haves

Experience with one or more disassemblers (IDA, Binary Ninja, Ghidra)
Experience with one or more assembly languages (x86, ARM, RISCV, etc)
Comfortable with software development in compiled and scripting languages (C, C++, Rust, Python, etc)
Experience with object files, compilers, linkers, and loaders (ELF, DWARF, GDB, LLVM)
Experience with both static and dynamic program analysis techniques
Experience with reverse engineering firmware and/or embedded systems
Experience with emulation frameworks
Experience with software exploitation techniques and mitigations
Experience with attack surface mapping across systems and system-of-systems
Experience with networking protocols and analysis thereof
Experience with automation of vulnerability detection
Experience with utilizing emerging artificial intelligence technologies for vulnerability detection or automation thereof
Comfortable utilizing hypervisors and containers (VMware, Proxmox, Docker, etc)

Responsibilities

Designs, deploys, and operates systems, networks, applications, and tools that underpin cyber security and cyber defense.
Provides integration of hardware, software, and other components to solve operational challenges for cyber defenders.
Performs data and systems engineering functions to support cyber operations activities and systems.
Engineers and deploys security and defensive countermeasures and controls.
Ensures system security needed in operations are assessed, established, and included in design and development; executes security requirements definition, systems analysis, systems design, security hardening, security test and evaluation, and certification and accreditation.
Supports operational systems and performs activities such as vulnerability scanning, network, and system security configuration, etc.
Design and architecture of new approaches, methods and techniques for cyber defense and resiliency for information technology and operational technology systems and networks.
May interface with external entities including law enforcement, intelligence and other government organizations and agencies.