Draper · 2 weeks ago
Principal Cyber Tool and Capability Developer
Cambridge, MA
Full-time
Onsite
Senior Level, Lead/Staff
$95K/yr - $238K/yr
10+ years expDraper is an independent, nonprofit research and development company headquartered in Cambridge, MA, focusing on delivering innovative solutions for national challenges. They are seeking a Principal Cyber Tool and Capability Developer to lead cybersecurity projects, develop software tools, and address security vulnerabilities across various domains. The role involves collaboration with multidisciplinary teams to enhance national security through innovative software solutions.
Defense & Space
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Assess hardware and software for security vulnerabilities using a breadth of technologies and techniques
Develop software that meets behavior and security requirements for tailored applications
Integrate software capabilities with other tasks or groups to improve performance or behavior requirements
Create new tools and systems to detect and exploit vulnerabilities and system weaknesses
Document nominal application and system functionality, in addition to implemented changes
Independently drive solutions to complex problems - develop requirements, propose ways forward when customer requirements are unclear or incomplete, and adapt appropriately to changes in requirements
Subject Matter Expert (SME) in cyber security, able to plan, design, and execute large scale technical software and hardware solutions
Able to provide insight and suggest design modifications based on analysis outcomes, and to apply analysis techniques across a range of technical disciplines
Identify program/system-level technical risks and develop and execute mitigation strategies
Develop, document, and teach best practices to less experienced engineers; Demonstrate strong organization, planning, and time management skills to achieve program goals
Performs other related duties as assigned
Qualification
Required
Requires a bachelor's in computer science, computer engineering, or related field
10-15 years experience in Cybersecurity or related field is required
Expertise in developing custom low-level software tools and integrating those tools into complex (both embedded and non-embedded) systems
Expert at using contemporary program analysis methodologies and techniques (static and dynamic). Relevant tools include Ghidra, Ida, Binary Ninja, Radare, Angr, debuggers (GDB, winDBG), emulation tools (Qemu), fuzzers (AFL++), etc
Experience with techniques that prevent reverse engineering and employ obfuscation or diversification
Proven background in researching and exploiting software vulnerabilities
Proficiency using secure coding practices and mitigation techniques against software attack vectors
Expert at using programming languages and their build systems such as: C, C++, Python, GoLang, Rust
Experience in compiler toolchain development such as building custom LLVM passes. Experience with leveraging the different stages of compilation i.e. intermediate representation
Experience in building high-quality code and helping others to meet those same coding standards
Proficiency with the core workings of operating systems (user mode, kernel mode, boot processes), especially in Windows, GNU/Linux, or RTOS contexts
Proficiency in leveraging a variety of computing architectures and their associated assembly languages (e.g. x86, ARM, RISCV, etc.)
Proven track record of leading tasks and projects. Knowledge and expertise in creating project timelines, executing task delegation, and prioritizing project goals in order to meet contractual obligations
Experienced in communicating project progress and goals to clients/sponsors. Ability to receive feedback and adapt to changes in project schedule/goals given client/sponsor needs
Effective using different communication styles depending on team needs. Experience communicating during difficult situations
Experience with presenting technical concepts to both technical and non-technical audiences
Experience participating in proposal writing and business winning
Curiosity-driven approach to solving complex, customer-driven problems as part of a multi-disciplinary team
Collaborate and communicate effectively and openly with multi-disciplinary program team members, program leadership, and non-technical personnel
Be a team player able to work in a fast-paced environment with the ability to balance multiple competing tasks and demands
Preferred
Experience with creating technical strategies at the organization level. Ability to leverage knowledge of the state-of-the-art, a company's expertise and niche skills, and client/sponsor needs to generate technical goals for an organization
Experience with seeing a project through from inception to delivery
Expertise in building reverse engineering automation tools and analysis frameworks
Experience in leveraging machine learning (where appropriate) to automate cyber software tool development and program analysis
History of business winning; proven experience leading proposals that resulted in new business
Background in proposing and executing R&D projects and exploring novel, cutting-edge concepts that are high risk, high reward. History of transitioning these projects to client/sponsor funded programs
Having an existing TS/SCI is preferred
Benefits
Draper supports many programs to improve work-life balance including workplace flexibility
Employee clubs ranging from photography to yoga
Health and finance workshops
Off site social events
Discounts to local museums and cultural activities
Company
Draper
We Engineer Solutions for the Nation’s Toughest Problems As an independent nonprofit engineering innovation company, Draper provides engineering services directly to government, industry, and academia.
1001-5000 employees
Funding
Current Stage
Late StageLeadership Team
Jerry Wohletz
President and Chief Executive Officer
Brenan McCarragher
Chief Technology Officer
Recent News
Business Journals
2024-03-28
2024-02-28
Company data provided by crunchbase