Subject Matter Expert - Hardware Reverse Engineer

BCMC • Arlington, VA

1d • Onsite

About The Position

BCMC is supporting a U.S. Government customer with onsite incident response for civilian Government agencies and critical asset owners experiencing cyber-attacks. Contract personnel investigate and characterize breaches, develop mitigation plans, and help restore services. The Subject Matter Expert will provide specialized hardware reverse-engineering expertise focused on operational technology (OT) and industrial control systems (ICS), supporting investigations of compromised edge devices and systems, including cases where malware is embedded in hardware components.

The role focuses on hardware forensics and investigative analysis of OT and ICS systems. The SME will analyze proprietary hardware, embedded systems, firmware, and low-level software; identify malicious modifications and exploitation risks; and help develop defensive measures and forensic workflows. The position also includes collaboration with research teams and electrical engineers, training and consultation for analysts, and technical support during active investigations.

Requirements

• U.S. citizenship.
• Active TS/SCI clearance.
• Ability to obtain DHS Suitability.
• 10+ years of experience in hardware reverse engineering or embedded-systems analysis.
• Deep expertise in OT/ICS hardware platforms and vulnerabilities.
• Ability to analyze novel or proprietary systems with limited documentation.
• Strong communication skills for explaining complex technical findings.
• Experience working collaboratively in research-oriented environments.
• Strong experience with firmware reverse engineering and analysis.
• Proficiency with reverse-engineering tools such as IDA Pro, Ghidra, and Binary Ninja.
• Deep understanding of ARM, MIPS, PowerPC, and other embedded processor architectures.
• Experience analyzing network-edge devices such as routers, switches, firewalls, and IoT devices.
• Knowledge of hardware debugging interfaces such as JTAG, SWD, and UART.
• Strong programming and scripting skills in Python, C, and Assembly.
• Understanding of exploitation techniques targeting embedded systems.
• Experience with malware analysis in hardware/firmware contexts.
• Excellent analytical and problem-solving abilities.
• Bachelor’s degree in Electrical Engineering, Computer Engineering, or a related discipline.

Nice To Haves

• Master’s degree or PhD.
• Experience supporting federal cybersecurity or critical infrastructure protection programs.
• Experience performing inspection, imaging, decapsulation, deprocessing, and other hardware reverse-engineering and exploitation activities in a state-of-the-art microelectronics exploitation laboratory.
• Background in offensive security or penetration testing of OT environments.
• Advanced reverse-engineering certifications such as GREM, GXPN, or similar.
• Experience with SCADA, PLC, RTU, and other industrial control components.
• Knowledge of critical infrastructure sector technologies, including energy, utilities, and manufacturing.
• Familiarity with supply-chain security and hardware implant detection.
• Experience with system-emulation platforms and virtual hardware analysis.
• Understanding of threat actor TTPs targeting OT and edge devices.
• Background in electronics manufacturing or hardware security research.
• Experience with chip decapsulation and invasive hardware-analysis techniques.
• DoD 8140.01 IAT Level III certification.
• PMP certification.

Responsibilities

• Conduct comprehensive hardware reverse engineering of OT and ICS devices.
• Analyze network-edge devices and embedded systems compromised by advanced threats.
• Perform deep-dive analysis of proprietary hardware targeted by adversaries.
• Conduct reverse engineering, failure analysis, vulnerability analysis, and other research to understand hardware systems, assess component functionality, and identify exploitation risks.
• Identify and extract deeply embedded malware from hardware components.
• Reverse engineer firmware and low-level software on embedded devices.
• Collaborate with research teams to leverage cutting-edge analytical capabilities.
• Utilize and enhance KI2 system emulation capabilities for hardware analysis.
• Document exploitation methodologies and defensive countermeasures.
• Develop standard operating procedures for hardware forensics workflows.
• Train CSD analysts on hardware reverse-engineering techniques.
• Provide expert consultation on edge-device security and vulnerabilities.
• Support forensic investigations in environments lacking EDR visibility.
• Analyze proprietary communication protocols and embedded-system functions.
• Identify hardware backdoors, implants, and malicious modifications.
• Collaborate with electrical engineers on chip-off forensics procedures.
• Provide reach-back support to operational analysts during active investigations.
• Contribute to research initiatives on emerging hardware threats.
• Document technical findings and intelligence for stakeholder dissemination.

Benefits

• Extremely competitive salary.
• 95% employer-paid employee medical, dental, and vision coverage.
• 100% employer-paid employee life, short-term disability, and long-term disability coverage.
• 401(k) with company match and profit sharing.
• Flexible Spending Account (FSA) for dependent and health care.
• 11 standard holidays and 3 weeks of annual leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior