Lead Software Reverse Engineer

STR • Woburn, MA

3d • Onsite

About The Position

STR is hiring a Lead Software Reverse Engineer to research and analyze vulnerabilities in cyber physical systems. This onsite role focuses on reverse engineering complex software and firmware, from Windows and Linux binaries to embedded firmware on non-traditional architectures and operating systems. The work includes developing automated reverse-engineering and binary-analysis tools, characterizing target-system protocols and functionality, and creating cybersecurity solutions. The engineer will collaborate with multidisciplinary teams, conduct vulnerability weaponization and exploit, payload, and mitigation development, and document, demonstrate, and present research. The work addresses real-world challenges with an impact on national security.

STR is a technology company specializing in advanced research and development for defense, intelligence, and national security, including cyber, sensors, communications, electronic warfare, and artificial intelligence. The company describes its environment as collaborative and supportive of deep technical understanding and recognizes team contributions and achievements.

Requirements

• Active Top Secret security clearance; U.S. citizenship is required by the U.S. Government for this clearance.
• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related field, plus a minimum of 7 years of relevant experience; a master’s or Ph.D. with equivalent work experience may also be considered.
• Experience with binary analysis of software or firmware.
• Experience with disassembly tools such as IDA Pro, Binary Ninja, or Ghidra.
• Proficiency in one or more programming languages, such as C/C++ or Python.
• Proficiency in one or more assembly languages, such as x86 or ARM.
• General understanding of reverse-engineering fundamentals, including memory layout and calling conventions.

Nice To Haves

• Vulnerability research and analysis.
• Knowledge of weaponizing discovered vulnerabilities into exploits.
• Implant or software patch development.
• Familiarity with binary emulation or vulnerability research, including tools such as QEMU or AFL++.
• Experience with DSP architectures, such as Texas Instruments, STMicroelectronics, NXP, or Analog Devices.
• Knowledge of operating-system internals, including memory, process, and thread management.
• Embedded systems or firmware analysis.
• Experience developing custom emulation tools to enable dynamic analysis.
• Disassembler or decompiler module development.
• Experience analyzing and reconstructing code or data flow.
• Automated reverse-engineering or software-analysis tool development.
• Experience debugging software without source code.
• Knowledge of binary file structures and formats.
• Experience analyzing protocols or message structures.
• Knowledge of anti-reverse-engineering techniques.
• Knowledge of intrusion-detection and anti-malware systems and techniques.

Responsibilities

• Reverse engineer complex software and firmware, including Windows and Linux binaries and embedded firmware on non-traditional architectures and operating systems.
• Develop and apply automated reverse-engineering and binary-analysis tools to characterize target-system protocols, interfaces, and functionality.
• Develop cybersecurity solutions in collaboration with multidisciplinary teams.
• Conduct vulnerability weaponization, exploit development, payload development, and exploit mitigation on a variety of targets.
• Document, demonstrate, and present research.
• Solve real-world problems with an impact on national security.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior