5 months ago
Cambridge, MA, USA or Reston, VA, USAMid Level / Senior
Base Salary
$75k - $156k/yr
Responsibilities
- Assess hardware and software for security vulnerabilities using varied technologies and techniques.
- Develop software and tailored applications that meet behavioral and security requirements.
- Integrate software capabilities with other teams to improve performance and required behavior.
- Create tools and systems to detect and exploit vulnerabilities and system weaknesses.
- Develop kernel modules, drivers, firmware, hypervisor internals, custom bootloaders, and forensic instrumentation.
- Analyze operating-system, hypervisor, and BIOS/UEFI internals for forensic evidence, persistence mechanisms, hidden processes, rootkits, and anomalies.
- Capture and analyze memory dumps, crash reports, and runtime logs.
- Document application and system functionality and implemented changes.
- Define analysis approaches, independently execute assignments, and contribute technical reports and presentations.
- Identify design concerns, communicate with project leadership, and support advanced R&D initiatives and critical programs.
Requirements
- 3–5 years of experience in cybersecurity or a related field.
- Proficiency developing kernel modules, drivers, or firmware for Windows, GNU/Linux, RTOS, or UEFI/BIOS.
- Proficiency implementing hypervisor internals, including virtual-machine lifecycle management and hardware emulation.
- Proficiency crafting bootloaders or firmware instrumentation for forensic data collection.
- Proficiency with anti-reverse-engineering, obfuscation, and diversification techniques.
- Proficiency analyzing operating-system internals, reverse engineering closed-source hypervisors and firmware, and dissecting memory management, interrupt handling, and system calls.
- Proficiency with BIOS/UEFI forensic analysis and identifying persistence mechanisms, hidden processes, and kernel-level rootkits.
- Proficiency with C, C++, Python, GoLang, or Rust and their build systems.
- Experience with software version control systems.
- Successful history authoring technical proposals and documents.
- Leadership experience in advanced R&D initiatives, government-funded projects, or critical programs with more than two full-time staff members.
- Ability to collaborate and communicate with multidisciplinary teams and diverse audiences.
- Ability to obtain and maintain a government TS/SCI security clearance.
Benefits
- Workplace flexibility and programs supporting work-life balance.
- Employee clubs, including photography and yoga.
- Health and finance workshops.
- Off-site social events and discounts to local museums and cultural activities.
- Full-time role located in Reston, Virginia.
About Draper
Draper is an independent, nonprofit engineering R&D organization that designs and delivers complex systems for government, defense, space, and biomedical customers. It works as a prime contractor and subcontractor on programs spanning guidance and navigation (PNT), autonomous systems, human systems, and special programs, with headquarters in Cambridge, Massachusetts. Its business model centers on sponsored research and engineering services for U.S. government agencies, industry partners, and academia.