This job has closed.

Booz Allen Hamilton · 1 day ago

Software Vulnerability Researcher

Quantico, VA

Full-time

Hybrid

Mid, Senior Level

$87K/yr - $198K/yr

3+ years exp

Booz Allen Hamilton is seeking a Software Vulnerability Researcher to provide reverse engineering and vulnerability analysis of software across various platforms. The role involves writing proof-of-concept software to simulate binary behavior, validating vulnerabilities, and authoring technical documentation related to security mechanisms.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Provide reverse engineering, static, and dynamic binary analysis, and vulnerability analysis of software on a variety of different platforms and operating systems

Write proof-of-concept software that simulates the behavior of analyzed binaries and their interactions with other system components and validate any discovered vulnerabilities

Author technical documentation of research or findings as it relates to all security mechanisms, including access control, encryption, and obfuscation

Qualification

PythonC/C++Static reverse engineeringVulnerability analysisEmbedded device softwareGhidraIDA ProSoftware exploitation techniquesMicrocontroller securityForensics analysisPacket capture analysisCryptographic algorithmsOperating systems knowledgeTechnical documentation

Required

Experience with Python, C, or C++ programming languages

Experience with embedded device software development and the compilers, linkers, and binary code generation process

Experience with static reverse engineering of software binaries, including Ghidra or IDA Pro

Experience finding and exploiting vulnerabilities in firmware binaries using static and dynamic reverse engineering techniques

Experience with modern software exploitation techniques, secure boot process, and bootloader design implementation for iOS or Android platforms

Experience with microcontroller security architecture and integrations, including ARM architecture, assembly language, or mobile OSs, such as Android or iOS

Experience extending or modifying developed exploit chains to devices or microcontrollers

Top Secret clearance

Bachelor's degree and 3+ years of experience with reverse engineering or vulnerability analysis, or 10+ years of experience with reverse engineering or vulnerability analysis in lieu of a degree