Vulnerability Researcher

Battelle • Columbus, OH

2d • Hybrid

About The Position

Battelle delivers when others can’t. We conduct research and development, manage national laboratories, design and manufacture products and deliver critical services for our clients—whether they are a multi-national corporation, a small start-up or a government agency. We recognize and appreciate the value and contributions of individuals from a wide range of backgrounds and experiences and welcome all qualified individuals to apply. Job Summary Battelle is currently seeking an aspiring Vulnerability Researcher to work in our Columbus, OH or Chantilly, VA offices. Do you enjoy conducting vulnerability research from scratch? Do you have arguments over Ghidra vs. IDApro vs. BinaryNinja? Do you constantly switch between static analysis, dynamic analysis, and other automated methods? Do byte restrictions on shellcode make you want to solve the problem that much more? If you answered yes to these questions, this is the job for you! As a Vulnerability Researcher you will work with a team of vulnerability researchers that have the same passion as you. You will use and build vulnerability research tools that push past the edge of current tools and techniques. On any given day you will research and debug an embedded device while getting the chance to bounce ideas off a close-knit team of researchers. We have the tools and the mentors you will need to take yourself to the next level and who are eager to learn from your experience.

Requirements

• Bachelor’s in Computer Science, Computer Engineering, Electrical Engineering, or related field of study and (2) years of experience, a Master’s degree in a relevant field, or an equivalent combination of education/experience in a relevant field
• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with one or more debuggers (WinDbg, OllyDbg, gdb)
• Experience with vulnerability research on one or more operating systems: Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or other custom operating systems
• Knowledge of advanced exploitation techniques (ret2libc,use-after-free,type confusion)
• Knowledge of exploit protection techniques (DEP, ASLR/NX)
• Ability to code in C
• Understanding of network protocols
• Must Be a US Citizen with the ability and willingness to obtain a DoD Secret or higher clearance

Nice To Haves

• Participation in CTFs
• Understanding of network protocols
• Experience with AI/ML
• Experience with microcontrollers
• Experience emulating embedded platforms for live debugging
• Experience using fuzzing tools such as AFL or Peach
• Concolic analysis research and implementation
• Experience with symbolic analysis
• Active DoD Secret security clearance

Benefits

• Balance life through a compressed work schedule : Most of our team follows a flexible, compressed work schedule that allows for every other Friday off—giving you a dedicated day to accomplish things in your personal life without using vacation time.
• Enjoy enhanced work flexibility, including a hybrid arrangement: You have options for where and when you work. Our Together with Flexibility model allows you to work 60% in-office and 40% remote, with Monday and Tuesday as common in-office days, dependent on team and position needs .
• Take time to recharge : You get paid time off to support work-life balance and keep motivated.
• Prioritize wellness : Stay healthy with medical, dental, and vision coverage with wellness incentives and benefits plus a variety of optional supplemental benefits.
• Better together : Coverage for partners, gender-affirming care and health support, and family formation support.
• Build your financial future : Build financial stability with an industry-leading 401(k) retirement savings plan. For most employees, we put in 5 percent whether you contribute or not, and match your contributions on top of that.
• Advance your education : Tuition assistance is available to pursue higher education.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees