Junior Reverse Engineering, Vulnerability Research Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct vulnerability research and reverse engineering for client projects.

• Execute static and dynamic analyses utilizing disassemblers, debuggers, and fuzzing tools.

• Develop exploits based on identified vulnerabilities.

• Share security research results internally and, when suitable, externally.

• Guide and mentor other security researchers.

• Analyze and fully comprehend the functionality of various systems.

• Engage in the initial stages of vulnerability research projects and advance them through multiple phases and iterations.

⛳️ Requirements

• Must be eligible to obtain and retain a TS/SCI security clearance; only U.S. citizens qualify for security clearances.

• A Bachelor's degree in Computer Engineering, Computer Science, Software Engineering, or a closely related technical field, or four years of relevant hands-on experience in a full-time software engineering or similar role.

• Experience in participating in CTFs, hackathons, or other cybersecurity competitions.

• Familiarity with Ghidra, Binary Ninja, IDA, or other reverse engineering/disassembler tools.

• Proficient in Linux fundamentals, including sockets, file descriptors, networking, iptables, file systems, and kernel concepts.

• Capability to read and write in C and assembly languages as required, including ARM, MIPS, and x86_64 architectures.

• Understanding of programming fundamentals, especially in networking, data structures, and data models.

• Knowledge of exploitation techniques such as arbitrary read-write primitives, shellcoding, and return-oriented/jump-oriented programming.

• Established history of exploit creation targeting Android operating systems and Chrome web browsers.

• Preferred: currently hold a Top Secret security clearance.

• Preferred: experience in OS and kernel reverse engineering.

• Preferred: familiarity with AFL++ or libfuzzer.

• Preferred: knowledge of SELinux, Seccomp, ASLR, and CFI.

• Preferred: strong expertise in dynamic analysis with gdb/gdbserver and similar tools.

• Preferred: basic understanding of processor tool chains and the Android NDK.

• Preferred: knowledge of Qemu or Unicorn emulation.

• Preferred: experience in identifying 0-days and vulnerabilities.

🏝️ Benefits

• Equal opportunity employment.

• A people-centric workplace where innovation flourishes, careers develop, and individuals are appreciated.