Lead Software Reverse Engineer
About The Position
STR is hiring a Lead Software Reverse Engineer to research and analyze vulnerabilities in cyber physical systems. The position is performed onsite and focuses on reverse engineering complex software and firmware, developing tools and cybersecurity solutions, and addressing challenging technical problems with impact on national security. The role involves analyzing targets ranging from Windows and Linux binaries to embedded firmware on non-traditional architectures and operating systems. The engineer will develop and apply automated reverse engineering and binary analysis tools to characterize system protocols, interfaces, and functionality; perform vulnerability weaponization, exploit and payload development, and exploit mitigation; and document, demonstrate, and present research. Work is carried out in multidisciplinary teams across a wide range of technologies. STR is a technology company focused on advanced research and development for defense, intelligence, and national security, including cyber, sensors, radar, sonar, communications, electronic warfare, and artificial intelligence. The company describes its environment as collaborative and learning-oriented, with an emphasis on technical understanding and recognizing team contributions. An active Top Secret clearance is required, and U.S. citizenship is needed by the U.S. Government. The position requires a bachelor’s degree in a relevant field and at least seven years of relevant experience; candidates with an MS or PhD and equivalent work experience may also be considered.
Requirements
- Active Top Secret security clearance; U.S. citizenship is required by the U.S. Government.
- Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related field, plus a minimum of 7 years of relevant experience. An MS or PhD with equivalent work experience may also be considered.
- Experience with binary analysis of software or firmware.
- Experience with disassembly tools such as IDA Pro, Binary Ninja, or Ghidra.
- Proficiency in one or more programming languages, such as C/C++ or Python.
- Proficiency in one or more assembly languages, such as x86 or ARM.
- General understanding of reverse engineering fundamentals, including memory layout and calling conventions.
Nice To Haves
- Vulnerability research and analysis.
- Knowledge of weaponizing discovered vulnerabilities into exploits.
- Implant or software patch development.
- Familiarity with binary emulation or vulnerability research, including tools such as QEMU or AFL++.
- Experience with DSP architectures, such as Texas Instruments, STMicroelectronics, NXP, or Analog Devices.
- Knowledge of operating system internals, including memory, process, and thread management.
- Embedded systems or firmware analysis experience.
- Experience developing custom emulation tools to enable dynamic analysis.
- Disassembler or decompiler module development.
- Experience analyzing and reconstructing code or data flow.
- Automated reverse engineering or software analysis tool development.
- Experience debugging software without source code.
- Knowledge of binary file structures and formats.
- Experience analyzing protocols or message structures.
- Knowledge of anti-reverse-engineering techniques.
- Knowledge of intrusion detection and anti-malware systems and techniques.
Responsibilities
- Reverse engineer complex software and firmware targets, from Windows and Linux binaries to embedded firmware on non-traditional architectures and operating systems.
- Develop and apply automated reverse engineering and binary analysis tools to characterize target-system protocols, interfaces, and functionality.
- Develop innovative cybersecurity solutions.
- Collaborate with multidisciplinary teams to address challenging problems across a wide range of technologies.
- Perform vulnerability weaponization, exploit development, payload development, and exploit mitigation on challenging targets.
- Document, demonstrate, and present research.
- Solve real-world problems with an impact on national security.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
