Software Reverse Engineer

<p>STR is hiring a<strong>&nbsp;Software Reverse Engineer&nbsp;</strong>who has a passion for research and analysis of vulnerabilities in cyber physical systems. Work must be performed onsite.</p> <p><strong>What you’ll do:</strong></p> <ul> <li>Reverse engineering complex software or firmware targets, ranging from typical Windows/Linux binaries to embedded firmware running non-traditional computer architectures and operating systems</li> <li>Developing and applying automated reverse engineering and binary analysis tools to characterize protocols, interfaces, and functionality of target systems</li> <li>Developing innovative cybersecurity solutions</li> <li>Working in multi-discipline teams to tackle challenging problems from a wide variety of technologies to develop innovative cybersecurity solutions</li> <li>Performing vulnerability weaponization, exploit development, payload development, and exploit mitigation on a variety of challenging targets</li> <li>Documenting, demonstrating, and presenting research</li> <li>Solving real world problems that have an impact on national security</li> </ul> <p><strong>Who you are:</strong></p> <ul> <li>This position requires an <strong>Active Top Secret (TS) security clearance</strong>, for which U.S. citizenship is needed by the U.S. Government</li> <li>BS, MS or PhD in Computer Science, Computer Engineering, Cybersecurity or related field (or equivalent work experience)</li> <li>Experience with binary analysis of software/firmware</li> <li>Experience with disassembly tools, such as IDA Pro, Binary Ninja, or Ghidra</li> <li>Proficiency in one or more programming languages: C/C++, Python, etc.</li> <li>Proficiency in one or more Assembly Languages: x86, ARM, etc.</li> <li>General understanding of reverse engineering fundamentals: memory layout, calling conventions, etc.</li> </ul> <p><strong>Nice to haves:</strong></p> <ul> <li>Vulnerability research and analysis</li> <li>Knowledge of weaponizing discovered vulnerabilities into exploits</li> <li>Implant or software patch development</li> <li>Familiarity with binary emulation or vulnerability research, including tools such as QEMU or AFL++</li> <li>Experience with DSP architectures, such as Texas Instruments, STMicroelectronics, NXP, or Analog Devices.</li> <li>Knowledge of operating system internals including memory/process/thread management</li> <li>Embedded systems or firmware analysis</li> <li>Experience development custom emulation tools to enable dynamic analysis</li> <li>Disassembler/decompiler module development</li> <li>Experience