3 months ago
Cambridge, MA, USA or Reston, VA, USAStaff+
Base Salary
$95k - $245k/yr
Responsibilities
- Define and evolve software architecture for embedded, real-time, and kernel-mode systems supporting cyber effects.
- Assess hardware and software for security vulnerabilities using static analysis, dynamic analysis, reverse engineering, fuzzing, and related techniques.
- Develop, integrate, document, and maintain custom low-level software tools and tailored applications.
- Create tools and systems to detect and exploit vulnerabilities and system weaknesses.
- Research and exploit software vulnerabilities and apply security mitigations and secure coding practices.
- Independently solve complex and ambiguous customer problems, develop requirements, and adapt solutions to changing needs.
- Lead tasks and projects, identify technical risks, and develop and execute mitigation strategies.
- Mentor engineers, teach best practices, and provide technical leadership across multidisciplinary teams.
- Present technical concepts to technical and non-technical audiences and communicate progress with clients and sponsors.
- Contribute to proposal writing, business winning, technical strategy, and transition of R&D projects into funded programs.
Requirements
- Bachelor's degree in computer science, computer engineering, or a related field.
- 10–15 years of experience in cybersecurity or a related field.
- Expertise architecting and developing custom low-level software tools and integrating them into complex embedded and non-embedded systems.
- Expertise with static and dynamic program analysis, reverse engineering automation, analysis frameworks, vulnerability research, and exploit development.
- Proficiency with C, C++, Python, Go, or Rust and their build systems.
- Experience developing compiler toolchains, including custom LLVM passes and use of intermediate representations.
- Proficiency with operating system concepts including user mode, kernel mode, and boot processes in Windows, GNU/Linux, or RTOS environments.
- Proficiency with computing architectures and assembly languages such as x86, ARM, and RISC-V.
- Proven experience leading tasks and projects, planning timelines, delegating work, prioritizing goals, and communicating with clients or sponsors.
- Ability to develop technical strategies, deliver high-quality cyber capabilities, lead proposals, and execute R&D projects.
- Applicants must be able to obtain and maintain a government security clearance.
- Existing TS/SCI clearance is preferred.
- Experience leveraging machine learning for cyber software tool development and program analysis is preferred.
Benefits
- The role is onsite in Cambridge, MA, or Reston, VA.
- Work-life-balance programs include workplace flexibility, employee clubs, health and finance workshops, off-site social events, and discounts to local museums and cultural activities.
- The listed compensation is base salary and excludes bonuses and benefits.
About Draper
Draper is an independent, nonprofit engineering R&D organization that designs and delivers complex systems for government, defense, space, and biomedical customers. It works as a prime contractor and subcontractor on programs spanning guidance and navigation (PNT), autonomous systems, human systems, and special programs, with headquarters in Cambridge, Massachusetts. Its business model centers on sponsored research and engineering services for U.S. government agencies, industry partners, and academia.