CNO - Vulnerability Researcher - RE, Embedded, 0-Day

Erias Ventures•Annapolis Junction, MD

20h

About The Position

The Vulnerability Researcher provides engineering and vulnerability research results related to hardware components, software applications, and operating systems to determine functionality, code structure, and system design for use in the discovery of initial access capabilities. This role involves actively debugging software, troubleshooting issues, and performing source code analysis to discover software flaws. The researcher will also develop proof-of-concept exploits and participate in technical presentations. The core of the role is to lead reverse engineering and vulnerability research of hardware, software, and operating systems to understand their design for discovering initial access capabilities.

Requirements

A current Top-Secret/SCI with polygraph security clearance is required. Candidates cannot be sponsored or nominated for a government security clearance under this position.
Bachelor's Degree in Computer Science or related field, or minimum two (2) years' experience in computer science, information systems, or network engineering
Minimum two (2) years' experience programming in Assembly, C, C#, C++, Perl, or Python
Minimum two (2) years demonstrated experience in either hardware or software reverse engineering, this often includes the use of tools such as (IDA Pro, Ghidra & Binary Ninja) to identify abstract concepts about the code flow of an application.
0-day vulnerabilities or CVEs discovered and attributed to themselves
History performing vulnerability research
Experience with writing or using fuzzers – AFL, LibFuzzer, ClusterFuzz, oss-fuzz
Experience with code analysis tools – CodeQL, Joern, Semgrep
History of exploiting or productizing 0-day vulnerabilities
History of exploiting or productizing n-day vulnerabilities/CVEs/publicly disclosed vulnerabilities
History of reverse engineering malware or other code for CNE purposes
Experience with reverse engineering tools – Ghidra, Ida Pro, Binary Ninja
Experience using debuggers – GDB or WinDbg
Experience writing, navigating, and building C/C++ code
Experience with tools like VsCode, Visual Studio, VIM/Emacs
Familiarity with ARM or MIPS architectures and Linux variants
Experience with Python for tool development

Nice To Haves

Use of Unix/Windows system APIs
Understanding of virtual function tables in C++
Heap allocation strategies and protections
Experience with very large software projects
Kernel programming experience (WDK / Unix||Linux)

Responsibilities

Actively debug software and troubleshoot issues with software crashes and programmatic flow
Perform source code analysis in an effort to discover software flaws, and provide/author documentation on the impact and severity of the flaw
Develop proof-of-concept exploits against research targets, prototypes, and hands-on demonstrations of vulnerability analysis results
Provide/author and participate in technical presentations on assigned projects
Lead reverse engineering and vulnerability research of hardware components, software applications, and operating systems to determine functionality, code structure, and circuit design for the use in the discovery of initial access capabilities

Benefits

Above Market Hourly Pay
11% Roth or Traditional 401k with Immediate Vesting and Deposit
Spot Bonuses for Assisting with Business Development and Company Growth
Professional Development Bonuses for Certificates and Degrees
Company subsidized Medical Coverage
100% Company Paid Vision and Dental Coverage
100% Company Paid Long Term Disability , Short Term Disability , and Group Life Insurance
Monthly Wellness Reimbursement
Paid Time Off with Flexible Work Schedules and Birthday Off
Amazon Prime Membership and Monthly Internet Reimbursement
Technology and Productivity Allowance for Equipment and Supplies
Morale Building and Company Events to Celebrate our Successes and Build our Community
Onboarding and Annual Swag
Company Paid Professional Development and Training
Referral bonus of up to $10,000 for each successful hire