Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
$117к-175к/год
$150к$180кмедиана$220к
По похожим ролям (49) ~ $180к/год
На СНГ рынке: $5.1к/мес ($2.9к - $7.9к)
84
Хорошая вакансия
развернуть
У роли четкий фокус на исследованиях встроенной безопасности, понятные задачи и хорошие возможности для развития, но требование действующего допуска США заметно ограничивает круг тех, кому доступна вакансия.
Кликните для подробной информации
Нужен допуск СШАЧеткий фокус работыАктуальные инструментыПоддержка развития
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Vulnerability Researcher (Embedded Security): Conducting reverse engineering, static and dynamic analysis, and proof-of-concept exploit development for wireless and embedded systems with an accent on firmware analysis, vulnerability discovery, and software security research. Focus on analyzing complex real-world targets, defeating modern mitigations, and collaborating with CNO developers and hardware engineers to deliver mission-critical security solutions.
Location: Dayton, Ohio; hybrid role
Salary: $117,235–$175,492 USD annualized
Company
hirify.global builds and deploys products that address complex challenges and deliver security solutions for government customers.
What you will do
Conduct comprehensive reverse engineering of a variety of embedded systems.
Perform static and dynamic analysis to identify vulnerabilities in embedded systems.
Develop proof-of-concept capabilities to demonstrate research progress.
Document research findings and expand the team’s understanding of embedded systems.
Collaborate with CNO developers, hardware engineers, and other disciplines to deliver customer solutions.
Requirements
Bachelor’s degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field.
Knowledge of *nix operating systems.
Knowledge of common network protocols, including TCP/IP, UDP, or HTTP.
Proficiency with at least one modern debugger, such as GDB or WinDBG.
Proficiency with at least one modern decompiler, such as Ghidra, IDA, or Binary Ninja.
Proficiency in at least one native programming language, such as C or C++.
Proficiency in at least one scripting language, such as Python.
Proficiency in at least one assembly language, such as x86 or ARM.
Active US Security clearance at the Secret or Top Secret level and the ability to obtain and maintain TS/SCI.
Nice to have
Experience conducting vulnerability research on embedded systems.
Experience defeating modern mitigations such as ASLR, DEP, and stack canaries.
Knowledge of cellular standards such as 4G or 5G.
Knowledge of low-bandwidth communications such as RS485, RS232, or CAN.
Knowledge of Wi-Fi, Bluetooth, or Zigbee communications.
Previous experience in a client-facing technical role.
Participation in CTFs or evidence of independent security research projects.
Culture & Benefits
Hybrid work environment in Dayton, Ohio.
Medical, dental, and vision insurance.
Life and disability insurance and retirement benefits.
Paid leave, tuition assistance, and professional development.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →