Senior Cybersecurity Reverse Engineer

LLNL•Livermore, CA

2d•Hybrid

About The Position

Lawrence Livermore National Laboratory (LLNL) is seeking a Senior Cybersecurity Reverse Engineer to lead efforts in analyzing malware and identifying software vulnerabilities for critical infrastructure systems and Federal networks. This role involves shaping research and development to secure software and firmware vital to national security, including industrial control systems, in collaboration with government agencies, manufacturers, and operators. The position will also lead projects to understand supply chain threats to critical systems and networks. These positions are programmatically in Global Security’s Energy and Homeland Security (E) Program and administratively in the Global Security Computing Applications Division (GS-CAD) within the Computing Directorate. The specific level (SES.3 or SES.4) will be determined by the hiring team based on the candidate's qualifications and experience.

Requirements

Ability to maintain a U.S. DOE Q-level security clearance, which requires U.S. citizenship.
Bachelor’s degree with significant focus in cybersecurity, computer science, information technology, computer engineering, or related technical field, or equivalent combination of education and related experience.
Significant experience and demonstrated ability to lead independent work.
Significant experience leading program analysis of source code, binaries, and firmware.
Experience in the use of hardware or software debuggers, static disassemblers and decompilers (such as IDA Pro), common binary file formats, dynamic analysis tools, software bills of materials, and/or network analysis tools.
Significant experience communicating technical information across multi-disciplinary teams and to non-cyber experts or senior management.
Application of interpersonal skills to collaborate effectively in a team environment.
Experience mitigating anti-reverse engineering techniques.
Advanced knowledge of state-of-the-art technologies in software assurance.
Advanced analytical, problem-solving, and decision-making skills to develop creative solutions to complex problems.
Advanced ability to effectively manage concurrent technical tasks with competing priorities.
Demonstrated ability to approach difficult problems with enthusiasm and creativity and to effectively change focus when necessary.
Advanced ability to communicate comprehensive knowledge effectively across multi-disciplinary teams and to non-cyber experts.
Ability to advise senior management and/or external sponsors.
Proficient interpersonal skills necessary to effectively collaborate and lead in a team environment.
Extensive experience and ability to plan the integration and implementation of new programs and/or operational best practices (SES.4 level).
Extensive project leadership experience and ability to apply, lead and develop cutting-edge principles and research (SES.4 level).
Ability to work independently while effectively managing concurrent technical tasks with competing priorities (SES.4 level).
Substantial experience creating technical direction and vision, writing research proposals, and securing sponsor funding (SES.4 level).
Extensive experience in and knowledge of at least one of the following subject areas: Instruction set architectures (e.g., ARM, x86/x64, PowerPC, MIPS); Reverse engineering intermediate languages (e.g., .NET, Java bytecode); Firmware analysis and extraction; or Operational technology implementation (SES.4 level).

Nice To Haves

Master’s degree with significant focus in cybersecurity, computer science, information technology, computer engineering, or a related technical field.
Knowledge of one or more of the following computer science disciplines: embedded systems, scientific data analysis, machine learning, systems programming, software engineering, formal verification methods, and high-performance computing.
Experience with industrial control systems software and hardware.
Ability to secure sponsor funding through winning proposals and sponsor relationships.
Previous experience working with the Department of Energy, Department of Homeland Security, Department of Defense, a utility, manufacturing, or hardware/software company, or a cybersecurity firm.

Responsibilities

Lead and support complex research projects requiring innovative methods for automated software analysis.
Analyze novel software, firmware, and malware using existing reversing tools and develop repeatable workflows.
Write reports to deliver analyses to sponsors.
Analyze source code and binaries to identify weaknesses or malicious functionality.
Develop new tools for source code and binary analysis, and vulnerability assessment for critical networks and infrastructure.
Develop tools and techniques to understand and mitigate threats to operational technology, such as industrial control system malware.
Identify new applications and opportunities for software assurance capabilities for critical networks and infrastructure cybersecurity.
Help create vision and technical direction for software assurance capabilities.
Develop new program growth opportunities through research proposal development and identifying sponsor needs.
Mentor others and utilize technical expertise to attract and retain projects, programs, and funding.
Perform other duties as assigned.
Guide and provide scientific and technical direction for a portfolio of highly complex technical tasks and projects (SES.4 level).
Set broad research/project vision and strategy and influence technical direction (SES.4 level).
Provide highly innovative solutions to abstract complex problems/ideas and convert them into usable algorithms/software modules (SES.4 level).
Lead strategic planning initiatives and direct/accomplish project/program goals significantly impacting major Laboratory programs (SES.4 level).
Contribute to the revolutionary advancement of knowledge (SES.4 level).