Назад
Company hidden
2 дня назад

Senior Vulnerability Researcher (Embedded Security)

117 235 - 175 492$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Vulnerability Researcher (Embedded Security): Conducting reverse engineering, static and dynamic analysis, and proof-of-concept exploit development for wireless and embedded systems with an accent on firmware analysis, vulnerability discovery, and software security research. Focus on analyzing complex real-world targets, defeating modern mitigations, and collaborating with CNO developers and hardware engineers to deliver mission-critical security solutions.

Location: Dayton, Ohio; hybrid role

Salary: $117,235–$175,492 USD annualized

Company

hirify.global builds and deploys products that address complex challenges and deliver security solutions for government customers.

What you will do

  • Conduct comprehensive reverse engineering of a variety of embedded systems.
  • Perform static and dynamic analysis to identify vulnerabilities in embedded systems.
  • Develop proof-of-concept capabilities to demonstrate research progress.
  • Document research findings and expand the team’s understanding of embedded systems.
  • Collaborate with CNO developers, hardware engineers, and other disciplines to deliver customer solutions.

Requirements

  • Bachelor’s degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field.
  • Knowledge of *nix operating systems.
  • Knowledge of common network protocols, including TCP/IP, UDP, or HTTP.
  • Proficiency with at least one modern debugger, such as GDB or WinDBG.
  • Proficiency with at least one modern decompiler, such as Ghidra, IDA, or Binary Ninja.
  • Proficiency in at least one native programming language, such as C or C++.
  • Proficiency in at least one scripting language, such as Python.
  • Proficiency in at least one assembly language, such as x86 or ARM.
  • Active US Security clearance at the Secret or Top Secret level and the ability to obtain and maintain TS/SCI.

Nice to have

  • Experience conducting vulnerability research on embedded systems.
  • Experience defeating modern mitigations such as ASLR, DEP, and stack canaries.
  • Knowledge of cellular standards such as 4G or 5G.
  • Knowledge of low-bandwidth communications such as RS485, RS232, or CAN.
  • Knowledge of Wi-Fi, Bluetooth, or Zigbee communications.
  • Previous experience in a client-facing technical role.
  • Participation in CTFs or evidence of independent security research projects.

Culture & Benefits

  • Hybrid work environment in Dayton, Ohio.
  • Medical, dental, and vision insurance.
  • Life and disability insurance and retirement benefits.
  • Paid leave, tuition assistance, and professional development.
  • Compensation considers education, experience, knowledge, skills, geographic location, contract affordability, and organizational requirements.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →