Senior Reverse Engineer - Cybersecurity

NOTES: YOU MUST BE A US CITIZEN OR GREEN CARD HOLDER AND YOU MUST BE BASED IN THE US. PLEASE ONLY APPLY IF YOU MEET THESE CRITERIA - THANKS.

To be considered, please apply for the position at https://objectsecurity.applytojob.com/apply/fTZGIJYmmP/Senior-Cybersecurity-Reverse-Engineer

You will be working with our world-leading scientists and engineers to develop an innovative, automated binary analysis product (funded by the Navy, DHS and others). You will write proofs of concept of reverse engineering, static and dynamic binary analysis, and vulnerability analysis of (binary) software on a variety of different platforms and operating systems. You will communicate the reverse engineering approaches and mechanisms to the team so you can together implement the best possible solution. You will be involved in tools such as Ghidra, BAP, radare2, and more. You need to be able to work with CFGs, lifting/rehosting/emulation etc.

Strongly preferred: reverse engineering experience for embedded/ICS devices, including connecting and extracting firmware/software.

Basic Qualifications:

• 5+ years of experience with binary analysis and/or vulnerability research (Masters or higher preferred; BA or BS degree in Computer Science, Engineering, or Mathematics)
• Strong programming and/or scripting skills in C, Java, Python, etc.
• Experience with instrumenting binaries and automated analysis of arbitrary binaries
• Experience with static and/or dynamic rewriting in low level representation and IR
• Experience with reverse engineering embedded devices and/or ICS including firmware extraction
• Ability to read or write assembly language, including x86/x64, ARM, MIPS, or PowerPC
• Experience with scripting static and dynamic binary analysis with open-source tools such as Ghidra, Radare, BAP, Frida, etc.
• Experience with fuzzing, dynamic binary instrumentation, and rehosting (QEMU or similar)
• Being a fast learner and communicating findings with team members
• Technical writing skills to document and report findings
• Ability to carry out scientific/technical research independently including ongoing discovery and/or development of methods