Назад
Company hidden
9 дней назад

Software Patch Verification Engineer (Cybersecurity)

132 123 - 198 184$
Формат работы
onsite
Тип работы
fulltime
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Software Patch Verification Engineer (Cybersecurity): Evaluating software and firmware patches through binary diffing, vulnerability analysis, formal regression checks, and security-fix validation with an accent on reverse engineering and reproducible verification evidence. Focus on benchmarking patched behavior, confirming vulnerability mitigation across target systems, and integrating AI-assisted verification tools into security analysis workflows.

Location: Linthicum, Maryland, United States; onsite at a customer site

Salary: $132,123–$198,184 USD annually

Company

Builds, deploys, and implements products that address complex challenges and support safer global operations.

What you will do

  • Evaluate software and firmware patches through binary patch diffing and root-cause vulnerability analysis.
  • Execute formal retests and regression checks to compare expected and observed patched behavior and verify bug closure.
  • Reproduce original vulnerability findings and provide verification evidence for system accreditation and reporting.
  • Independently confirm patch integrity and that security fixes fully address target vulnerabilities.
  • Document analytical findings and assist with integrating AI-assisted software verification tools into security workflows.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline, or equivalent practical experience.
  • Demonstrated experience with static and dynamic reverse engineering, binary patch diffing using tools such as BinDiff or Diaphora, and root-cause vulnerability analysis.
  • Hands-on proficiency with disassembly tools such as Ghidra, IDA Pro, or Binary Ninja; debuggers such as GDB or WinDbg; and formal retest or regression checks against software fixes.
  • Experience benchmarking expected versus observed patched behavior, evaluating patch vulnerability regressions, and compiling verification evidence for accreditation reporting.
  • Strong programming and scripting skills in C, C++, and Python within Linux environments.
  • Active US Top Secret/SCI security clearance with Polygraph is required.

Nice to have

  • Experience applying AI/ML models or LLM frameworks to code analysis, defect detection, or automated patch verification.
  • Familiarity with dynamic instrumentation frameworks such as Frida or DynamoRIO, or automated fuzzing engines.
  • Knowledge of operating system security mitigations including ASLR, DEP, CFI, and Stack Canaries, and common vulnerability patterns such as CWEs.

Culture & Benefits

  • Collaborative environment built around trust, intellectual rigor, and independent judgment.
  • Medical, dental, vision, life, and disability insurance.
  • Retirement benefits, paid leave, tuition assistance, and professional development.
  • Compensation reflects education, experience, skills, geographic location, and contract-specific requirements.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →