5 months ago
Cambridge, MA, USA or Reston, VA, USASenior
Base Salary
$82k - $206k/yr
Responsibilities
- Assess hardware and software for security vulnerabilities using varied technologies and techniques.
- Develop software meeting behavioral and security requirements for tailored applications.
- Integrate software capabilities with other tasks or groups to improve performance and behavior.
- Create tools and systems to detect and exploit vulnerabilities and system weaknesses.
- Perform program analysis and reverse engineering of firmware and embedded systems.
- Use reverse-engineering tools including Ghidra, IDA, GDB, and RR.
- Conduct physical instrumentation, hardware modification, soldering, and JTAG/SWD/BDM and flash-data extraction activities.
- Document application and system functionality and implemented changes.
- Define analysis approaches, independently execute assignments, and contribute technical reports and presentations.
- Identify design-related needs and concerns and communicate them to project leadership.
- Author technical proposals and documents and lead advanced R&D initiatives and critical programs with more than two full-time staff members.
Requirements
- 5–10 years of experience in cybersecurity or a related field.
- Proficiency with modern program-analysis methodologies and reverse-engineering techniques for firmware or embedded systems.
- Familiarity with binary file and filesystem structures and formats.
- Hands-on proficiency with physical instrumentation or hardware modification, including soldering.
- Experience with JTAG, SWD, BDM, eMMC, NAND, and SPI flash data extraction.
- Knowledge of embedded-device exploitation techniques across platforms and architectures.
- Familiarity with network-stack and operating-system internals, including user mode, kernel mode, and boot processes, for GNU/Linux or an RTOS.
- Familiarity with x86, ARM, Hexagon, and PowerPC architectures and assembly.
- Proficiency with C, C++, Python, or Java and familiarity with Bash or PowerShell.
- Familiarity with development environments for GNU/Linux or Windows.
- Successful history authoring technical proposals and documents and leading advanced R&D or government-funded projects.
- Preferred: experience with side-channel attacks such as glitching; custom filesystem extraction and modification; OOB/CRC data removal or regeneration; and bus and protocol analysis.
- Ability to collaborate and communicate with multidisciplinary teams, leadership, and nontechnical personnel.
- Ability to balance multiple competing tasks and demands in a fast-paced environment.
- Ability to obtain and maintain a government TS/SCI security clearance.
Benefits
- Workplace flexibility and programs supporting work-life balance.
- Employee clubs, including photography and yoga.
- Health and finance workshops.
- Off-site social events and discounts to local museums and cultural activities.
- Full-time position located in Cambridge, Massachusetts.
About Draper
Draper is an independent, nonprofit engineering R&D organization that designs and delivers complex systems for government, defense, space, and biomedical customers. It works as a prime contractor and subcontractor on programs spanning guidance and navigation (PNT), autonomous systems, human systems, and special programs, with headquarters in Cambridge, Massachusetts. Its business model centers on sponsored research and engineering services for U.S. government agencies, industry partners, and academia.