Junior Vulnerability Researcher

Battelle•Columbus, OH

15h•Hybrid

About The Position

Battelle is currently seeking aspiring Junior Vulnerability Researchers to work in our Columbus, OH or Chantilly, VA offices. This role involves conducting vulnerability research from scratch, utilizing and building tools that push the boundaries of current techniques. You will research and debug embedded devices, collaborating with a close-knit team of researchers who provide mentorship and opportunities for growth. The position is designed for individuals passionate about vulnerability research, reverse engineering, and exploitation.

Requirements

Bachelor’s in Computer Science, Computer Engineering, Electrical Engineering, or related field of study and (2) years of experience, a Master’s degree in a relevant field, or an equivalent combination of education/experience in a relevant field.
Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja).
Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.).
Experience with one or more debuggers (WinDbg, OllyDbg, gdb).
Experience with vulnerability research on one or more operating systems: Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or other custom operating systems.
Knowledge of advanced exploitation techniques (ret2libc, use-after-free, type confusion).
Knowledge of exploit protection techniques (DEP, ASLR/NX).
Ability to code in C.
Understanding of network protocols.
Must be a US Citizen with the ability and willingness to obtain a DoD Secret or higher clearance.

Nice To Haves

Participation in CTFs.
Understanding of network protocols.
Experience with AI/ML.
Experience with microcontrollers.
Experience emulating embedded platforms for live debugging.
Experience using fuzzing tools such as AFL or Peach.
Concolic analysis research and implementation.
Experience with symbolic analysis.
Active DoD Secret security clearance.

Responsibilities

Conduct vulnerability research from scratch.
Utilize and build vulnerability research tools.
Research and debug embedded devices.
Collaborate with a team of vulnerability researchers.
Apply knowledge of advanced exploitation techniques.
Apply knowledge of exploit protection techniques.

Benefits

Comprehensive and competitive benefits.
Flexible, compressed work schedule allowing for every other Friday off.
Hybrid work arrangement (60% in-office, 40% remote).
Paid time off.
Medical, dental, and vision coverage.
Wellness incentives and benefits.
Optional supplemental benefits.
Coverage for partners, gender-affirming care and health support, and family formation support.
Industry-leading 401(k) retirement savings plan with company contribution.
Tuition assistance.