Cyber Systems Exploitation Researcher
About The Position
The Cyber Systems Exploitation Researcher is an entry-level Level 1 Assistant Staff role in MIT Lincoln Laboratory’s Cyber System Assessments Group. The group performs software and hardware reverse engineering, vulnerability research and discovery, and system exploitation, developing and prototyping capabilities for U.S. government operational partners. The work supports national security missions by identifying and demonstrating vulnerabilities so that vulnerabilities in U.S. systems can be corrected and vulnerabilities in other systems better understood. The researcher contributes to the development of cybersecurity tools and techniques, reverse engineering and exploiting software and hardware systems relevant to U.S. government operations and national defense. Research areas include cyber tool prototyping and technical analysis of offensive or defensive cyber tools and systems, automated vulnerability discovery, reverse engineering, software protection mechanisms, static analysis, and dynamic instrumentation. The role also involves communicating research to non-domain experts through writing, public presentations, and hands-on training. As a Level 1 Assistant Staff member, the employee works with multidisciplinary teams and experienced staff on defined research and technical assignments, applying foundational knowledge in a technical discipline while learning relevant mission context, standards, and project practices. Work may include hardware and software development, systems and data analysis, component fabrication, system integration, testing, and documentation. Assignments are completed with guidance and contribute to broader project objectives and the Laboratory’s mission.
Requirements
- Bachelor’s degree in a STEM discipline or another relevant technical field, or equivalent relevant experience.
- Foundational understanding of research principles, analytical methods, and structured problem solving.
- Ability to learn and apply technical tools, systems, standards, and procedures within a team environment.
- Effective written and verbal communication skills, including the ability to document work clearly, ask clarifying questions, and interact respectfully with colleagues, sponsors, and other stakeholders.
- Demonstrated collaboration, curiosity, attention to detail, and willingness to receive and apply feedback.
- Must be able to obtain a Secret-level DoD security clearance and be eligible and willing to apply for a Top Secret SCI-level DoD security clearance and maintain it once obtained.
- U.S. citizenship is required.
Nice To Haves
- Familiarity with version control systems such as Git.
- Familiarity with disassemblers or decompilers such as Ghidra and IDA Pro.
- Familiarity with debuggers such as WinDbg and GDB.
- Familiarity with programming languages such as C/C++ and Python.
- Familiarity with infrastructure/container provisioning and orchestration tools such as Ansible, Kubernetes, and Docker.
- Familiarity with network protocol analysis tools such as Wireshark and tcpdump.
- Familiarity with emulation or virtualization tools such as VMware and QEMU.
- Familiarity with operating system internals.
- Familiarity with reverse engineering embedded systems firmware, malicious code, mobile applications, and related areas.
- Familiarity with vulnerability assessment.
- Familiarity with statistics and metrics.
- Familiarity with SAT/SMT solvers.
- Familiarity with symbolic execution.
- Familiarity with data-flow analysis for compiled binaries.
- Familiarity with binary intermediate representations.
- Familiarity with binary translation.
- Familiarity with compiler construction.
- Familiarity with anti-debugging and anti-instrumentation techniques.
- Familiarity with network and host security products.
Responsibilities
- Support the design, development, data analysis, programming, testing, troubleshooting, and documentation of system prototypes under guidance from experienced staff.
- Apply basic technical practices, tools, and procedures to complete defined tasks in a timely manner.
- Assist team members with data collection and documentation in accordance with standard policies and procedures.
- Learn relevant mission context, technical standards, and processes that support project team success.
- Communicate progress, raise questions in a timely manner, and incorporate feedback into technical work products.
- Contribute to the development of cybersecurity tools and techniques.
- Reverse engineer and exploit software and hardware systems important to U.S. government operations and national defense.
- Conduct research in cyber tool prototyping and technical analysis of offensive or defensive cyber tools and systems, automated vulnerability discovery, reverse engineering, software protection mechanisms, static analysis, and dynamic instrumentation.
- Communicate research to non-domain experts through writing, public presentations, and hands-on training sessions.
Benefits
- Comprehensive health, dental, and vision plans.
- MIT-funded pension.
- Matching 401(k).
- Paid leave, including vacation, sick, parental, and military leave.
- Tuition reimbursement and continuing education programs.
- Mentorship programs.
- Work-life balance options.
- Voluntary benefits, discounts, and perks.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
