Apply on Employer Site

Carnegie Mellon University · 14 hours ago

Senior Reverse Engineer Researcher

Arlington, VA

Full-time

Onsite

Senior Level

5+ years exp

Carnegie Mellon University is a leading institution in software engineering and computer security, and they are seeking a Senior Reverse Engineer Researcher for the Threat Analysis directorate. The role involves reverse engineering malicious code, developing new analysis methods, and collaborating with the broader security community to address complex security threats.

EducationHigher EducationUniversities

Growth Opportunities

No H1B

Security Clearance Required

Responsibilities

Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, work to identify and address emerging and complex threats, and effectively participate in the broader security community

Perform in-depth reverse engineering of malicious code, document and transition results in reports, presentations, and technical exchanges

Explore ways to use artificial intelligence to support reverse engineering and apply reverse engineering practices to artificial intelligence systems

Design, prototype, and transition new analysis methods and tools

Identify and document emerging and complex active security threats

Participate in the broader security community through collaboration, papers, and presentations

Qualification

Reverse engineeringMalware analysisStatic analysis toolsProgramming languagesSoftware engineering conceptsOperating system conceptsNetwork analysis toolsTechnical writingMentoringCommunication skills

Required

BS in Computer Science or related discipline with ten (10) years of experience; OR MS in the same fields with eight (8) years of experience; OR PhD in the same fields with five (5) years of experience

Enjoy working on emerging and complex malware analysis and reverse engineering problems

Have an analytical mindset and deep curiosity about how software works

Ability to balance rapid prototyping with maintainable tool development

Strong technical writing experience

Recognize and deal appropriately with confidential and sensitive information

Able to handle continual shifting priorities

Enjoy mentoring and training others as well as sharing knowledge

Communicate effectively with technical and non-technical audiences

Willingness to travel to various locations to support the SEI's overall mission including sponsor sites, conferences, and offsite meetings on occasion. Moderate Travel (15%)

Subject to a background check and obtain and maintain an active Department of War (DoW) security clearance

Preferred

Experience with or knowledge of reverse engineering software binaries for a variety of architectures, both at the user level and kernel level

Static analysis tools (e.g. IDA Pro, NSA Ghidra, Binary Ninja)

User-level and kernel-level debuggers (e.g. x32dbg, x64dbg, gdb, WinDbg)

Native programming languages (e.g. C/C++)

High-level programming languages (e.g. Java, Python, GoLang, etc.)

Software engineering and design concepts

Firmware and device driver development

Malware tradecraft and threat actor tactics, techniques, and procedures (TTPs)

Malware signature creation and use, independent of detection technology

Operating system concepts and internals and binary file formats (e.g. PE, ELF, Mach-O, etc.)

Internet Protocols and network analysis tools (e.g. Wireshark, netcat, etc.)

Compiler theory, cryptography, and malware deobfuscation techniques

Mobile device development and reverse engineering

Malware sandboxes or instrumentation frameworks (e.g., Frida, QEMU, Unicorn Engine)

General understanding and experience in artificial intelligence and machine learning and using artificial intelligence to support reverse engineering and malware analysis

Benefits

8% monthly contribution for your retirement, without having to contribute yourself

Tuition benefits to CMU and other institutions for you and your dependent children

Healthy work/life balance with flexible work arrangements and paid parental and military leave

Access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System

Annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies

Relocation assistance