Apply on Employer Site

SAIC · 4 months ago

CNO Reverse Engineer

Fort Meade, MD

Full-time

Onsite

Senior Level, Lead/Staff

$160K/yr - $200K/yr

8+ years exp

SAIC is a leading provider of systems engineering and integration solutions for the Intelligence Community, seeking a CNO Reverse Engineer to enhance mission excellence on a newly awarded contract. The role involves analyzing software and systems, performing vulnerability research, and developing exploits while utilizing analytical skills to achieve project goals.

Information TechnologySecurityService IndustrySoftware

Work & Life Balance

No H1B

Security Clearance Required

Responsibilities

Perform reverse engineering of hardware components, software applications, and operating systems to determine functionality, code structure, and circuit design for use in the design and development of software tools

Document and deliver reports, proofs-of-concept code that demonstrate findings, and participate in hands-on demonstrations

Study disassembly and write Python to audit pieces of C++ code to determine where there are errors or opportunities for improvement

Lead small teams and ensure communication between stakeholders and management where necessary

Qualification

Reverse EngineeringCC++PythonVulnerability ResearchAssembly LanguageReverse Engineering ToolsOS InternalsNetwork ProtocolsAnalytical SkillsProblem-Solving Skills

Required

Active TS/SCI with Polygraph

Bachelor's degree in the field of computer science, information systems, or network engineering

Minimum of eight (8) years' experience to include five (5) years' experience with reverse engineering

Extensive experience with C or C++, Python, and Assembly

Use of Reverse Engineering tools such as IDA Pro, Ghidra, Binary Ninja

Preferred

Understanding of OS Internals (i.e. Windows, Linux, Android)

Experience with Vulnerability Research

Experience reading or writing assembly (x86, x64, ARM, PPC, MIPS, SPARC, 68k, etc.)

Experience developing embedded systems and building and using tools to find, exploit, and productize vulnerabilities in complex software systems

Understanding of network protocols (TCP/IP stacks, wire-level protocols, RF communications, BGP, routing protocols, etc.)

Understanding of exploit mitigations such as DEP and ASLR

Experience using debuggers such as gdb, WinDbg, OllyDbg, experience with BDI/JTAG, and experience with modern C++ development, such as RAII, C++11, C++14