Subject Matter Expert II

Arsiem•Arlington, VA

3d•Onsite

About The Position

ARSIEM Corporation is seeking a Subject Matter Expert in hardware reverse engineering to support a government client in Arlington, Virginia. The role provides specialized expertise in hardware reverse engineering focused on operational technology (OT) and industrial control systems (ICS). The expert will investigate compromised edge devices and systems, including cases where malware is embedded within hardware components, and will apply technical knowledge of proprietary hardware, exploitation methodologies, and defensive strategies. The position emphasizes analytical and investigative hardware forensics and threat activity targeting critical infrastructure.

Requirements

Bachelor’s degree in Electrical Engineering, Computer Engineering, or a related discipline.
10+ years of experience in hardware reverse engineering or embedded systems analysis.
Deep expertise in OT/ICS hardware platforms and vulnerabilities.
Ability to analyze novel or proprietary systems with limited documentation.
Strong communication skills for explaining complex technical findings.
Experience working collaboratively in research-oriented environments.
Strong experience with firmware reverse engineering and analysis.
Proficiency with reverse engineering tools such as IDA Pro, Ghidra, or Binary Ninja.
Deep understanding of ARM, MIPS, PowerPC, and other embedded processor architectures.
Experience analyzing network-edge devices such as routers, switches, firewalls, and IoT devices.
Knowledge of hardware debugging interfaces such as JTAG, SWD, and UART.
Strong programming and scripting skills in Python, C, and Assembly.
Understanding of exploitation techniques targeting embedded systems.
Experience with malware analysis in hardware/firmware contexts.
Excellent analytical and problem-solving abilities.
Active TS/SCI clearance and ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability.

Nice To Haves

Master’s degree or PhD.
Experience supporting federal cybersecurity or critical infrastructure protection programs.
Experience performing inspection, imaging, decapsulation, deprocessing, and other hardware reverse engineering and exploitation activities in a state-of-the-art microelectronics exploitation laboratory.
Background in offensive security or penetration testing of OT environments.
Advanced reverse engineering certifications such as GREM, GXPN, or similar.
Experience with SCADA, PLC, RTU, and other industrial control components.
Knowledge of critical infrastructure sector technologies, including energy, utilities, and manufacturing.
Familiarity with supply chain security and hardware implant detection.
Experience with system emulation platforms and virtual hardware analysis.
Understanding of threat actor TTPs targeting OT and edge devices.
Background in electronics manufacturing or hardware security research.
Experience with chip decapsulation and invasive hardware analysis techniques.
DoD 8140.01 IAT Level III PMP.

Responsibilities

Conduct comprehensive hardware reverse engineering of OT and ICS devices.
Analyze network-edge devices and embedded systems compromised by advanced threats.
Perform deep-dive analysis of proprietary hardware targeted by adversaries.
Conduct reverse engineering, failure analysis, vulnerability analysis, and other research to understand hardware systems, assess component functionality, and identify exploitation risks.
Identify and extract deeply embedded malware from hardware components.
Reverse engineer firmware and low-level software on embedded devices.
Collaborate with Nightwing research teams to leverage analytical capabilities.
Utilize and enhance KI2 system emulation capabilities for hardware analysis.
Document exploitation methodologies and defensive countermeasures.
Develop standard operating procedures for hardware forensics workflows.
Train CSD analysts on hardware reverse engineering techniques.
Provide expert consultation on edge-device security and vulnerabilities.
Support forensic investigations in environments without EDR visibility.
Analyze proprietary communication protocols and embedded-system functions.
Identify hardware backdoors, implants, and malicious modifications.
Collaborate with electrical engineers on chip-off forensics procedures.
Provide reach-back support to operational analysts during active investigations.
Contribute to research initiatives on emerging hardware threats.
Document technical findings and intelligence for stakeholder dissemination.