Reverse Engineer Researcher

Carnegie Mellon University • Pittsburgh, PA

18h

About The Position

The CERT Division of the Software Engineering Institute (SEI) at Carnegie Mellon University is seeking a Reverse Engineer Researcher for its Threat Analysis directorate. The SEI is a federally funded research and development center that works with defense and government organizations, industry, and academia to improve software-intensive systems and software engineering capabilities.

The researcher will reverse engineer malicious code for high-impact customers, develop new analysis methods and tools, and help identify and address emerging and complex threats. The role also explores applications of artificial intelligence to reverse engineering and applies reverse engineering practices to AI systems. The researcher documents and transitions results through reports, presentations, and technical exchanges, and contributes to the broader security community through collaboration and public-facing technical work.

The position is based in Arlington, Virginia, or Pittsburgh, Pennsylvania. Moderate travel, approximately 15%, is required to sponsor sites, conferences, and offsite meetings. The employee will be subject to a background check and must obtain and maintain an active Department of War security clearance.

Requirements

• Bachelor’s degree in computer science or a related discipline and eight years of experience; or a master’s degree in the same fields and five years of experience; or a PhD in the same fields and two years of experience.
• Ability to obtain and maintain an active Department of War security clearance and pass a background check.
• Experience or knowledge in reverse engineering software binaries across a variety of architectures at both user and kernel levels.
• Experience or knowledge using static analysis tools such as IDA Pro, NSA Ghidra, or Binary Ninja.
• Experience or knowledge using user-level and kernel-level debuggers such as x32dbg, x64dbg, gdb, or WinDbg.
• Experience or knowledge of native programming languages such as C/C++, and high-level languages such as Java, Python, or Go.
• Experience or knowledge of software engineering and design concepts.
• Experience or knowledge of firmware and device driver development.
• Experience or knowledge of malware tradecraft and threat actor tactics, techniques, and procedures.
• Experience or knowledge of malware signature creation and use independent of detection technology.
• Experience or knowledge of operating system concepts and internals, and binary file formats such as PE, ELF, or Mach-O.
• Experience or knowledge of Internet protocols and network analysis tools such as Wireshark or netcat.
• Experience or knowledge of compiler theory, cryptography, and malware deobfuscation techniques.
• Experience or knowledge of mobile device development and reverse engineering.
• Experience or knowledge of malware sandboxes or instrumentation frameworks such as Frida, QEMU, or Unicorn Engine.
• General understanding and experience in artificial intelligence and machine learning, including using AI to support reverse engineering and malware analysis.
• Strong technical writing skills and effective communication with technical and non-technical audiences.
• Ability to handle confidential and sensitive information appropriately and adapt to continually shifting priorities.
• Willingness to travel to support the SEI’s mission.

Responsibilities

• Perform in-depth reverse engineering of malicious code in support of high-impact customers.
• Document and transition technical results through reports, presentations, and technical exchanges.
• Explore ways to use artificial intelligence to support reverse engineering and apply reverse engineering practices to AI systems.
• Design, prototype, develop, and transition new analysis methods and tools.
• Identify and document emerging and complex active security threats.
• Participate in the broader security community through collaboration, papers, and presentations.
• Travel to sponsor sites, conferences, and offsite meetings as needed; travel is approximately 15%.

Benefits

• An 8% monthly retirement contribution without requiring an employee contribution.
• Tuition benefits at Carnegie Mellon University and other institutions for employees and their dependent children.
• Flexible work arrangements and paid parental and military leave.
• Access to university resources, including mindfulness programs, childcare and back-up care benefits.
• A monthly transit benefit on WMATA and free transportation on the Pittsburgh Regional Transit System.
• Annual professional development opportunities, including conferences, training, and certifications.
• Reimbursement for membership in professional societies.
• Relocation assistance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior