Senior Cyber Reverse Engineer

Pacific Northwest National Laboratory•Seattle, OH

About The Position

PNNL is looking for a senior cyber security engineer with a focus in software reverse engineering. The applicant should be experienced in static and dynamic software analysis, well versed in cyber threat modalities, and interested in joining a growing team of IT/OT experts. A passion for understanding unique systems and being able to communicate both the problem and potential mitigations is critical. This position is expected to take on task leadership, help mentor junior engineers, and advise project leadership on novel directions for investigations.

Requirements

BS/BA and 7+ years of relevant work experience -OR- MS/MA and 5+ years of relevant work experience -OR- PhD with 3+ year of relevant experience
U.S. Citizenship
Ability to obtain and maintain a federal security clearance.
Must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP).
Must pass a drug test prior to commencing employment.

Nice To Haves

Experience with one or more disassemblers (IDA Pro, Binary Ninja, Ghidra).
Experience with one or more assembly languages (x86, ARM, RISCV, PPC, etc).
Comfortable with software development in compiled and scripting languages (C, C++, Rust, Python, etc).
Experience with object files, compilers, linkers, loaders, and debuggers (ELF, DWARF, GDB, LLVM).
Experience with both static and dynamic program analysis techniques.
Experience with reverse engineering firmware and/or embedded systems from OT devices.
Experience with emulation frameworks (QEMU, Renode).
Experience with software exploitation techniques and modern mitigations.

Responsibilities

Designs, deploys, and operates systems, networks, applications, and tools that underpin cyber security and cyber defense.
Provides integration of hardware, software, and other components to solve operational challenges for cyber defenders.
Performs data and systems engineering functions to support cyber operations activities and systems.
Engineers and deploys security and defensive countermeasures and controls.
Ensures system security needed in operations are assessed, established, and included in design and development; executes security requirements definition, systems analysis, systems design, security hardening, security test and evaluation, and certification and accreditation.
Supports operational systems and performs activities such as vulnerability scanning, network, and system security configuration, etc.
Design and architecture of new approaches, methods and techniques for cyber defense and resiliency for information technology and operational technology systems and networks.
May interface with external entities including law enforcement, intelligence and other government organizations and agencies.