STR ยท 3 hours ago
Senior Cyber Software Engineer
STR is hiring a Senior Cyber Software Engineer who has a passion for developing tools and techniques to enhance the security and resiliency of national defense software systems. The role involves applying software engineering principles to develop robust software solutions and conducting security assessments to ensure the integrity of operational software systems.
Artificial Intelligence (AI)Machine Learning
Responsibilities
Apply software engineering principles to develop robust and resilient software solutions for critical national security missions
Develop static analysis tools to identify and mitigate vulnerabilities in software systems
Implement and refine fuzzing techniques to discover potential security weaknesses
Conduct thorough security assessments to ensure the integrity and security of operational (or soon-to-be operational) software systems
Qualification
Required
Active Secret security clearance, for which U.S. citizenship is needed by U.S. Government
BS, MS, or PhD in Computer Science, or related field with 5+ years of relevant professional experience
Strong background in C/C++ and ability to rapidly pick up other languages
Experience with static analysis tools and techniques
Solid understanding of software engineering principles and practices
Ability to develop engineering solutions to first-of-its-kind problems
Familiarity with assembly language, operating systems internals (memory/process/thread management), threading, compiler technologies (e.g., GCC, LLVM)
Experience with software scripting and build automation tools (e.g. bash, make)
Experience with build tools and dependency management (e.g., LLVM+Clang, GNU Make/CMake/pip/Gradle/Cargo)
General understanding of reverse engineering fundamentals: memory layout, calling conventions, etc
Preferred
Containerization experience (e.g., Docker/Podman)
Proficient in Rust
CI/CD DevOps Tool experience (e.g., Github Actions / GitlabCI / Jenkins)
Experience with dynamic analysis tools (e.g., PIN / DynamoRio / AFL++) to include development of fuzzing tools