Senior Cybersecurity Reverse Engineer

LLNL•Livermore, CA

5h•$175,530 - $267,060•Hybrid

About The Position

Lawrence Livermore National Laboratory (LLNL) is seeking a Senior Cybersecurity Reverse Engineer to lead efforts in analyzing malware and identifying vulnerabilities in software that supports critical infrastructure systems and Federal networks. This role will contribute to research and development initiatives aimed at securing software and firmware vital to national security, including industrial control systems, in collaboration with government agencies, manufacturers, and operators. The position also involves leading projects to understand supply chain threats to critical systems and networks. These positions are programmatically aligned with Global Security’s Energy and Homeland Security (E) Program and administratively within the Global Security Computing Applications Division (GS-CAD) of the Computing Directorate. The role can be filled at either the SES.3 or SES.4 level, depending on the candidate's qualifications and experience.

Requirements

Ability to maintain a U.S. DOE Q-level security clearance, which requires U.S. citizenship.
Bachelor’s degree with significant focus in cybersecurity, computer science, information technology, computer engineering, or related technical field, or equivalent combination of education and related experience and significant experience and demonstrated ability to lead independent work.
Significant experience leading program analysis of source code, binaries, and firmware.
Experience in the use of hardware or software debuggers, static disassemblers and decompilers (such as IDA Pro), common binary file formats, dynamic analysis tools, software bills of materials, and/or network analysis tools.
Significant experience communicating technical information across multi-disciplinary teams and to non-cyber experts or senior management, while applying interpersonal skills to collaborate effectively in a team environment.
Experience mitigating anti-reverse engineering techniques.
Advanced knowledge of state-of-the-art technologies in software assurance.
Advanced analytical, problem-solving, and decision-making skills to develop creative solutions to complex problems.
Advanced ability to effectively manage concurrent technical tasks with competing priorities, along with the demonstrated ability to approach difficult problems with enthusiasm and creativity and to effectively change focus when necessary.
Advanced ability to communicate comprehensive knowledge effectively across multi-disciplinary teams and to non-cyber experts, and advise senior management and/or external sponsors, and proficient interpersonal skills necessary to effectively collaborate and lead in a team environment.
Extensive experience and ability to plan the integration and implementation of new programs and/or operational best practices (SES.4 level).
Extensive project leadership experience and ability to apply, lead and develop cutting-edge principles and research, working independently while effectively managing concurrent technical tasks with competing priorities (SES.4 level).
Substantial experience creating technical direction and vision, writing research proposals, and securing sponsor funding (SES.4 level).
Extensive experience in and knowledge of at least one of the following subject areas: Instruction set architectures (e.g., ARM, x86/x64, PowerPC, MIPS); Reverse engineering intermediate languages (e.g., .NET, Java bytecode); Firmware analysis and extraction; or Operational technology implementation (SES.4 level).

Nice To Haves

Master’s degree with significant focus in cybersecurity, computer science, information technology, computer engineering, or a related technical field.
Knowledge of one or more of the following computer science disciplines: embedded systems, scientific data analysis, machine learning, systems programming, software engineering, formal verification methods, and high-performance computing.
Experience with industrial control systems software and hardware.
Ability to secure sponsor funding through winning proposals and sponsor relationships.
Previous experience working Department of Energy, Department of Homeland Security, Department of Defense, a utility, manufacturing, or hardware/software company, or a cybersecurity firm.

Responsibilities

Lead and support complex research projects using innovative methods for automated software analysis.
Analyze novel software, firmware, and malware using existing reversing tools, develop repeatable workflows, and write reports for sponsors.
Analyze source code and binaries to identify weaknesses or malicious functionality.
Develop new tools for source code and binary analysis, and vulnerability assessment for critical networks and infrastructure.
Develop tools and techniques to understand and mitigate threats to operational technology, such as industrial control system malware.
Identify new applications and opportunities for software assurance capabilities for critical networks and infrastructure cybersecurity, and help create vision and technical direction.
Develop new program growth opportunities through research proposal development and identifying sponsor needs.
Mentor others and utilize technical expertise to attract and retain projects, programs, and funding.
Perform other duties as assigned.
Guide and provide scientific and technical direction for a portfolio of highly complex technical tasks and projects (SES.4 level).
Set broad research/project vision and strategy and influence technical direction (SES.4 level).
Provide highly innovative solutions to abstract complex problems/ideas and convert them into usable algorithms/software modules (SES.4 level).
Lead strategic planning initiatives, direct and accomplish project/program goals and objectives significantly impacting major Laboratory programs (SES.4 level).
Set high-level goals, and contribute to the revolutionary advancement of knowledge (SES.4 level).