CNO Developer (Onsite)

Nightwing Intelligence Solutions•San Antonio, TX

3d•Onsite

About The Position

Vulnerability Researchers at NightWing CODEX analyze systems to understand how they work and how they behave when they break. Candidates must be able to play both sides of the fence, both developing and defeating new and advanced security techniques. Projects are undertaken in small teams with close coordination with customers. All our engineers write code, but many of our engineers spend as much time taking systems apart as building new ones. A typical day can involve studying disassembly or writing Python to audit a piece of C++ code.

Requirements

Ability to obtain a U.S. Government TS/SCI Clearance
Experience with C or C++
Experience with Python
Basic hardware reverse engineering of embedded systems
JTAG, CAN, SWD, or other hardware interface experience
Requires a Bachelor’s in Science, Technology, Engineering, or Mathematics (STEM preferred) and a minimum of 5 years of prior engineering experience or equivalent experience, or MS with minimum of 3 years of experience

Nice To Haves

Existing U.S. Government DOD TS or TS/SCI Clearance
Understanding of OS Internals (any major OS)
Experience reading or writing assembly (x86, x64, ARM, PPC, MIPS, SPARC, 68k, or others)
Familiarity with stack frames, calling conventions, and memory management
Experience developing embedded systems
Understanding of network protocols (TCP/IP stacks, wire-level protocols, RF communications, BGP, routing protocols, or others).
Understanding of exploit mitigations such as DEP and ASLR
Experience using reverse engineering tools such as Ghidra, IDA Pro, HexRays, Binary Ninja, or objdump.
Experience using debuggers such as gdb, WinDbg, OllyDbg

Responsibilities

Analyze systems to understand how they work and how they behave when they break.
Develop and defeat new and advanced security techniques.
Undertake projects in small teams with close coordination with customers.
Study disassembly.
Write Python to audit C++ code.
Build and use tools to find, exploit, and productize vulnerabilities in complex software systems.
Utilize full system emulation for research and analysis.