Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$132к-198к/год
$150к$180кмедиана$210к
По похожим ролям (49) ~ $180к/год
На СНГ рынке: $4.6к/мес ($3к - $6.3к)
88
Крутая вакансия
развернуть
У вакансии чёткий фокус на кибербезопасности, понятные обязанности и практическая работа с реверс-инжинирингом и проверкой патчей; требование действующего допуска TS/SCI с полиграфом сильно ограничивает круг тех, кому она доступна.
Нужен допуск
Сильный стек
ИИ для защиты
Чёткие задачи
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Software Patch Verification Engineer (Cybersecurity): Evaluating software and firmware patches through binary diffing, vulnerability analysis, formal regression checks, and security-fix validation with an accent on reverse engineering and reproducible verification evidence. Focus on benchmarking patched behavior, confirming vulnerability mitigation across target systems, and integrating AI-assisted verification tools into security analysis workflows.
Location: Linthicum, Maryland, United States; onsite at a customer site
Salary: $132,123–$198,184 USD annually
Company
Builds, deploys, and implements products that address complex challenges and support safer global operations.
What you will do
Evaluate software and firmware patches through binary patch diffing and root-cause vulnerability analysis.
Execute formal retests and regression checks to compare expected and observed patched behavior and verify bug closure.
Reproduce original vulnerability findings and provide verification evidence for system accreditation and reporting.
Independently confirm patch integrity and that security fixes fully address target vulnerabilities.
Document analytical findings and assist with integrating AI-assisted software verification tools into security workflows.
Requirements
Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline, or equivalent practical experience.
Demonstrated experience with static and dynamic reverse engineering, binary patch diffing using tools such as BinDiff or Diaphora, and root-cause vulnerability analysis.
Hands-on proficiency with disassembly tools such as Ghidra, IDA Pro, or Binary Ninja; debuggers such as GDB or WinDbg; and formal retest or regression checks against software fixes.
Experience benchmarking expected versus observed patched behavior, evaluating patch vulnerability regressions, and compiling verification evidence for accreditation reporting.
Strong programming and scripting skills in C, C++, and Python within Linux environments.
Active US Top Secret/SCI security clearance with Polygraph is required.
Nice to have
Experience applying AI/ML models or LLM frameworks to code analysis, defect detection, or automated patch verification.
Familiarity with dynamic instrumentation frameworks such as Frida or DynamoRIO, or automated fuzzing engines.
Knowledge of operating system security mitigations including ASLR, DEP, CFI, and Stack Canaries, and common vulnerability patterns such as CWEs.
Culture & Benefits
Collaborative environment built around trust, intellectual rigor, and independent judgment.
Medical, dental, vision, life, and disability insurance.
Retirement benefits, paid leave, tuition assistance, and professional development.
Compensation reflects education, experience, skills, geographic location, and contract-specific requirements.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →