Security Researcher / Systems Hacker

Riverside Research Institute•Lexington, MA

3d•$95,000 - $200,000

About The Position

Riverside Research is an independent National Security Nonprofit dedicated to research and development in the national interest. We provide high-end technical services, research and development, and prototype solutions to some of the country’s most challenging technical problems. All Riverside Research opportunities require U.S. Citizenship Position Overview Riverside Research’s Secure and Resilient Systems group seeks a computer scientist with a focus on systems security research. The researcher will contribute to applied research projects from cradle to grave including: ideation (e.g., system architecture, technical proposal writing), planning (e.g., designing new methods and approaches), execution (e.g., prototyping, experimentation) and transition (e.g., publishing and/or briefing results). Research problems tackled in this position may involve systems software (e.g., real time operating systems (RTOS), secure hypervisors), computer architecture (e.g., tagged architectures), peripheral hardware (e.g., custom device drivers, FPGA hardware, bus protocols), compiler extensions (e.g., LLVM passes, custom backends) and/or program analysis (e.g., fuzzer implementation, symbolic execution). Awareness of peripheral domains such as cryptography, formal methods and reverse engineering will enable better collaboration across the Secure and Resilient Systems group. Successful candidates for this role will have the deep technical and big-picture skills necessary to both decompose big problems and communicate effectively with both technical and less-technical stakeholders and contributors. If you can see a forest made of weeds, if you know how to eat an elephant (hint: one bite at a time), or if you can explain virtual memory to your grandmother… you may have the right skills to join Riverside Research’s Secure and Resilient Systems group.

Requirements

Thesis-based MS degree with 3+ years experience or PhD degree. Equivalent work experience in systems research may substitute. Degree is preferred in related technical field, such as computer science, computer engineering, electrical engineering, or cybersecurity.
Strong systems software development fundamentals, including proficiency with C/C++, Assembly (1 or more architecture), and Python. Knowledge of principles in computer architecture, operating systems, and compilers.
Strong software development fundamentals such as source code version control, documentation, debugging, toolchains, build systems, etc
Experience working inside a large project (e.g., submitting PRs, interacting with open-source communities and mailing lists, git branches/merges/rebasing, tiered build systems, etc)
Strong grasp on the research process (e.g., reading & writing academic papers, ideation for inventing solutions to hard problems)
Superior written and verbal communications skills
Must be eligible to obtain a Top Secret security clearance.

Nice To Haves

Healthy balance between technical orientation and business acumen
Ability to operate independently with limited supervision and feedback, and establish a solid working relationship with technical staff and business leaders in the group and across Riverside Research
Experience with both defensive and offensive cyber tools
Familiarity with seL4, Rust, LLVM, AFL++, or other cutting-edge system software languages and tools
Existing/prior security clearance

Responsibilities

Help design and implement innovative solutions to customer problems related to systems software security
Prototype and evaluate features within large system software projects (e.g., Linux, Xen, QEMU, etc.)
Build new tools features, and/or capabilities in languages like C/C++, Python, Rust, Assembly, etc.
Contribute to whitepapers and/or published papers that document innovative work performed.
Document and communicate design decisions, technical challenges, and progress to technical and less-technical internal and external stakeholders
Collaborate with team members on debugging programs, pair programming, reviewing papers/proposals, etc.