Software Reverse Engineer

STR is hiring a Software Reverse Engineer who has a passion for research and analysis of vulnerabilities in cyber physical systems.

Duties will include but are not limited to:

• Reverse engineering complex software or firmware targets, ranging from typical Windows/Linux binaries to embedded firmware running non-traditional computer architectures and operating systems
• Developing and applying automated reverse engineering and binary analysis tools to characterize protocols, interfaces, and functionality of target systems
• Developing innovative cybersecurity solutions
• Working in multi-discipline teams to tackle challenging problems from a wide variety of technologies
• Performing vulnerability research and developing exploits
• Documenting, demonstrating, and presenting research
• Solving real world problems that have an impact on national security
• Work must be performed onsite

Required Skills and Experience:

• Ability to obtain a Security Clearance at the Top Secret (TS) level
• BS, MS or PhD in Computer Science, Computer Engineering, Cybersecurity or related field (or equivalent work experience)
• Experience with binary analysis of software/firmware
• Experience with disassembly tools, such as IDA Pro, Binary Ninja, or Ghidra
• Proficiency in one or more programming languages: C/C , Python, etc.
• Proficiency in one or more Assembly Languages: x86, ARM, etc.
• General understanding of reverse engineering fundamentals: memory layout, calling conventions, etc.

Desired Skills and Experience:

• Active Security Clearance at the Secret or Top Secret (TS) level
• Vulnerability research and analysis
• Exploitation development
• Implant or software patch development
• Operating system internals including memory/process/thread management
• Embedded systems or firmware analysis
• Knowledge of anti-reverse engineering techniques
• Analyzing protocols or message structures
• Knowledge of binary file structures and formats
• Developing automated reverse engineering or software analysis tools
• Developing disassembler/decompiler modules
• Debugging software without source code
• Analyzing and reconstructing code/data flow