Research Scientist, GCCIS Department of Cybersecurity
About The Position
The Research Scientist will conduct security research on open-source cryptographic software, identifying and fixing implementation vulnerabilities, contributing fixes upstream, and supporting sponsored research. The role focuses on analyzing cryptographic libraries and protocol implementations for traditional defects and side-channel vulnerabilities, developing patches and tests, and shepherding contributions through upstream code review. The position also handles security-sensitive findings through coordinated disclosure, contributes to external funding proposals, and guides graduate students on sponsored projects. The role designs and conducts scientific research, analyzes results, produces reports and figures, writes manuscripts for peer-reviewed publication, assists with grant writing, and presents research at conferences. It also includes participating in outreach activities and professional development. This is a one-year appointment, with the possibility of renewal based on available funding. It is a soft-money position, so continuation depends on the candidate's ability to obtain external funding. The position is hybrid and classified as exempt.
Requirements
- Master's degree in a related field; equivalent combinations of experience and education may be considered.
- Three years of relevant experience; equivalent combinations of experience and education may be considered.
- Knowledge of principles and practices of the relevant research field.
- Knowledge of scientific research theory and methods.
- Skill in Microsoft Office Suite and applicable research software.
- Scientific writing skills with attention to detail and precision.
- Ability to collect, analyze, and report on complex data sets.
- Ability to independently plan and execute research.
- Must be eligible to work in the United States.
Nice To Haves
- PhD or equivalent doctorate in computer science, computer engineering, electrical engineering, or a closely related field.
- One year of relevant post-degree experience.
- Proficiency with Linux, particularly the command line and coreutils.
- Software engineering experience, particularly in C and assembly.
- Knowledge of applied cryptography and side-channel analysis.
- Familiarity with open-source cryptography libraries, particularly OpenSSL.
- Familiarity with open-source contribution workflows, particularly git and pull requests.
- Experience writing research proposals for external sponsors.
Responsibilities
- Analyze cryptographic library source code and protocol implementations for security defects, including side-channel vulnerabilities.
- Develop patches and tests, and shepherd contributions through upstream code review to acceptance.
- Handle security-sensitive findings under coordinated disclosure.
- Contribute substantively to external funding proposals and assist with grant writing.
- Guide graduate students on sponsored projects.
- Design and conduct scientific research experiments using advanced knowledge of the research field and theory.
- Analyze results and produce reports and figures for presentation and publication.
- Write manuscripts for peer-reviewed publication.
- Develop and deliver presentations of research results at conferences.
- Participate in outreach activities involving tours, presentations, and open houses.
- Engage in professional development to stay current on emerging research and technology in the relevant field.
- Perform other duties as assigned.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
