Reverse Engineer Researcher

Software Engineering Institute | Carnegie Mellon University • Pittsburgh, PA

7d • Hybrid

About The Position

The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Our core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time. The CERT Division of the Software Engineering Institute (SEI) is seeking an applicant for the role of a Reverse Engineer Researcher for the Threat Analysis directorate. The SEI is a federally funded research and development center at Carnegie Mellon University.

Requirements

• BS in Computer Science or related discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR PhD in the same fields with two (2) years of experience.
• Enjoy working on emerging and complex malware analysis and reverse engineering problems.
• Have an analytical mindset and deep curiosity about how software works.
• Ability to balance rapid prototyping with maintainable tool development.
• Strong technical writing experience.
• Recognize and deal appropriately with confidential and sensitive information.
• Able to handle continual shifting priorities.
• Enjoy mentoring and training others as well as sharing knowledge.
• Communicate effectively with technical and non-technical audiences.
• Willingness to travel to various locations to support the SEI’s overall mission This includes sponsor sites, conferences, and offsite meetings on occasion. Moderate Travel (15%)
• Subject to a background check and obtain and maintain an active Department of War security clearance
• Experience with or knowledge of Reverse engineering software binaries for a variety of architectures, both at the user level and kernel level
• Experience with or knowledge of Static analysis tools (e.g. IDA Pro, NSA Ghidra, Binary Ninja)
• Experience with or knowledge of User-level and kernel-level debuggers (e.g. x32dbg, x64dbg, gdb, WinDbg)
• Experience with or knowledge of Native programming languages (e.g. C/C++).
• Experience with or knowledge of High-level programming languages (e.g. Java, Python, GoLang, etc.)
• Experience with or knowledge of Software engineering and design concepts
• Experience with or knowledge of Firmware and device driver development
• Experience with or knowledge of Malware tradecraft and threat actor tactics, techniques, and procedures (TTPs)
• Experience with or knowledge of Malware signature creation and use, independent of detection technology
• Experience with or knowledge of Operating system concepts and internals and binary file formats (e.g. PE, ELF, Mach-O, etc.)
• Experience with or knowledge of Internet Protocols and network analysis tools (e.g. Wireshark, netcat, etc.)
• Experience with or knowledge of Compiler theory, cryptography, and malware deobfuscation techniques.
• Experience with or knowledge of Mobile device development and reverse engineering
• Experience with or knowledge of Malware sandboxes or instrumentation frameworks (e.g., Frida, QEMU, Unicorn Engine).
• General understanding and experience in artificial intelligence and machine learning and using artificial intelligence to support reverse engineering and malware analysis

Responsibilities

• Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, work to identify and address emerging and complex threats, and effectively participate in the broader security community
• Perform in-depth reverse engineering of malicious code, document and transition results in reports, presentations, and technical exchanges
• Explore ways to use artificial intelligence to support of reverse engineering and apply reverse engineering practices to artificial intelligence systems
• Design, prototype, and transition new analysis methods and tools
• Identify and document emerging and complex active security threats
• Participate in the broader security community through collaboration, papers, and presentations

Benefits

• 8% monthly contribution for your retirement, without having to contribute yourself
• Tuition benefits to CMU and other institutions for you and your dependent children
• Healthy work/life balance with flexible work arrangements and paid parental and military leave
• Access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System
• Annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies
• Relocation assistance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior