Junior Cyber Reverse Engineer

Pacific Northwest National Laboratory•Richland, WA

1d•Onsite

About The Position

At PNNL, our core capabilities are divided among major departments that we refer to as Directorates within the Lab, focused on a specific area of scientific research or other function, with its own leadership team and dedicated budget. Our Science & Technology directorates include National Security, Earth and Biological Sciences, Physical and Computational Sciences, and Energy and Environment. In addition, we have an Environmental Molecular Sciences Laboratory, a Department of Energy, Office of Science user facility housed on the PNNL campus. The National Security Directorate (NSD) drives science-based, mission-focused solutions to take on complex, real-world threats to our nation and the world. The Emerging Threats and Technologies Division, part of the National Security Directorate, consists of over 400 scientists, engineers, and analysts with backgrounds in cyber, nuclear, intelligence, policy, data science, and other fields. We work in interdisciplinary project teams to provide innovative concepts that integrate policy, analytics, science, and technology into unique solutions.

Requirements

BS/BA and 2 years of relevant experience -OR- MS/MA -OR- PhD
U.S. Citizenship
Ability to obtain and maintain a federal security clearance.
Background Investigation: Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter in accordance with 10 CFR 710, Appendix B.
Drug Testing: All Security Clearance positions are Testing Designated Positions, which means that the applicant selected for hire is subject to pre-employment drug testing, and post-employment random drug testing. In addition, applicants must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP).
Note: Applicants will be considered ineligible for security clearance processing by the U.S. Department of Energy if non-use of illegal drugs, including marijuana, for 12 months cannot be demonstrated.
This position is a Testing Designated Position (TDP). The candidate selected for this position will be subject to pre-employment and random drug testing for illegal drugs, including marijuana, consistent with the Controlled Substances Act and the PNNL Workplace Substance Abuse Program.
As a national laboratory, PNNL is responsible for adhering to the Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Order 473.1A, which require new employees to obtain and maintain a HSPD-12 Personal Identify Verification (PIV) Credential. To obtain this credential, new employees must successfully complete the applicable tier of federal background investigation post hire and receive a favorable federal adjudication. The tier of federal background investigation will be determined by job duties and national security or public trust responsibilities associated with the job. All tiers of investigation include a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last 1 to 7 years (depending on the applicable tier of investigation). Illegal drug activities include marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.
For foreign national candidates: If you have not resided in the U.S. for three consecutive years, you are not eligible for the PIV credential and instead will need to obtain a favorable Local Site Specific Only (LSSO) Federal risk determination to maintain employment. Once you meet the three-year residency requirement thereafter, you will be required to obtain a PIV credential to maintain employment. The tier of federal background investigation required to obtain the PIV credential will be determined by job duties at the time you become eligible for the PIV credential.
The Department of Energy (DOE) prohibits DOE employees and contractors from having any affiliation with the "country of risk" without explicit approval by DOE and Battelle. If you are offered a position at PNNL and currently have any affiliation with the government of one of these countries, you will be required to disclose this information and recuse yourself of that affiliation or receive approval from DOE and Battelle prior to your first day of employment.

Nice To Haves

Comfortable with one or more disassemblers (IDA Pro, Binary Ninja, Ghidra).
Comfortable with one or more assembly languages (x86, ARM, RISCV, PPC, etc).
Comfortable with software development in compiled and scripting languages (C, C++, Rust, Python, etc).
Comfortable with object files, compilers, linkers, loaders, and debuggers (ELF, DWARF, GDB, LLVM).
Comfortable with both static and dynamic program analysis techniques.
Comfortable with reverse engineering firmware and/or embedded systems from OT devices.
Comfortable with emulation frameworks (QEMU, Renode).
Comfortable with software exploitation techniques and modern mitigations.

Responsibilities

Designs, deploys, and operates systems, networks, applications, and tools that underpin cyber security and cyber defense.
Provides integration of hardware, software, and other components to solve operational challenges for cyber defenders.
Performs data and systems engineering functions to support cyber operations activities and systems.
Engineers and deploys security and defensive countermeasures and controls.
Ensures system security needed in operations are assessed, established, and included in design and development; executes security requirements definition, systems analysis, systems design, security hardening, security test and evaluation, and certification and accreditation.
Supports operational systems and performs activities such as vulnerability scanning, network, and system security configuration, etc.
Design and architecture of new approaches, methods and techniques for cyber defense and resiliency for information technology and operational technology systems and networks.
May interface with external entities including law enforcement, intelligence and other government organizations and agencies.