Junior Vulnerability Researcher

Battelle • Columbus, OH

95d

About The Position

Battelle is currently seeking an aspiring Junior Vulnerability Researcher to work in our Columbus, OH location. Do you enjoy conducting vulnerability research from scratch? Do you have arguments over Ghidra vs. IDApro vs. BinaryNinja? Do you constantly switch between static analysis, dynamic analysis, and other automated methods? Do byte restrictions on shellcode make you want to solve the problem that much more? If you answered yes to these questions, this is the job for you! As a junior Vulnerability Researcher, you will work with a team of vulnerability researchers that have the same passion as you. You will use and build vulnerability research tools that push past the edge of current tools and techniques. On any given day you will research and debug an embedded device while getting the chance to bounce ideas off a close-knit team of researchers. We have the tools and the mentors you will need to take yourself to the next level and who are eager to learn from your experience. “From Silicon to Systems” - We are an elite, multi-disciplinary team, bringing together the brightest minds from physics, computer science, electrical engineering, and mathematics to develop unique embedded security solutions for government and industrial customers. Battelle has been trusted by elite government clients to solve some of the world's hardest security problems. We work in small agile teams to push the bounds of computing technology. Our high-powered labs include specialized software and hardware, so our engineers have everything they need to invent new Cyber solutions. We encourage new ideas with our large Internal Research and Development (IRAD) program where engineers work on projects they are passionate about. Inventors and innovators are rewarded by our industry-leading IP compensation program. Our group works collaboratively with many parts of Battelle's larger organization on projects ranging from genomics to robotics.

Requirements

• Bachelor's in Computer Science, Computer Engineering, Electrical Engineering, or related field of study and (2) years of experience, a Master's degree in a relevant field, or an equivalent combination of education/experience in a relevant field
• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with one or more debuggers (WinDbg, OllyDbg, gdb)
• Experience with vulnerability research on one or more operating systems: Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or other custom operating systems
• Knowledge of advanced exploitation techniques (ret2libc, use-after-free, type confusion)
• Knowledge of exploit protection techniques (DEP, ASLR/NX)
• Ability to code in C
• Understanding of network protocols
• Must Be a US Citizen with the ability and willingness to obtain a DoD Secret or higher clearance

Nice To Haves

• Participation in CTFs
• Understanding of network protocols
• Experience with AI/ML
• Experience with microcontrollers
• Experience emulating embedded platforms for live debugging
• Experience using fuzzing tools such as AFL or Peach
• Concolic analysis research and implementation
• Experience with symbolic analysis
• Active DoD Secret security clearance

Benefits

• Tuition assistance, paid training
• Software and Intellectual Property development royalty sharing
• Mentorship and learning culture
• Internally funded and guided research projects with large amounts of individual autonomy
• Flexible, compressed work schedule that allows for every other Friday off
• Hybrid work arrangement: 60% in-office and 40% remote
• Paid time off to support work-life balance
• Medical, dental, and vision coverage with wellness incentives
• Coverage for partners, gender-affirming care and health support, and family formation support
• Industry-leading 401(k) retirement savings plan with 5% contribution from the company
• Tuition assistance for higher education

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree