3 months ago
Cambridge, MA, USA or Reston, VA, USASenior
Base Salary
$82k - $206k/yr
Responsibilities
- Assess hardware and software for security vulnerabilities using varied technologies and techniques.
- Develop software meeting behavioral and security requirements for tailored applications.
- Integrate software capabilities with other tasks or groups to improve performance and behavior.
- Create tools and systems to detect and exploit vulnerabilities and system weaknesses.
- Perform program analysis and reverse engineering of firmware and embedded systems.
- Use reverse-engineering tools including Ghidra, IDA, GDB, and RR.
- Conduct physical instrumentation, hardware modification, soldering, and JTAG/SWD/BDM and flash-data extraction activities.
- Document application and system functionality and implemented changes.
- Define analysis approaches, independently execute assignments, and contribute technical reports and presentations.
- Identify design-related needs and concerns and communicate them to project leadership.
- Author technical proposals and documents and lead advanced R&D initiatives and critical programs with more than two full-time staff members.
Requirements
- 5–10 years of experience in cybersecurity or a related field.
- Proficiency with modern program-analysis methodologies and reverse-engineering techniques for firmware or embedded systems.
- Familiarity with binary file and filesystem structures and formats.
- Hands-on proficiency with physical instrumentation or hardware modification, including soldering.
- Experience with JTAG, SWD, BDM, eMMC, NAND, and SPI flash data extraction.
- Knowledge of embedded-device exploitation techniques across platforms and architectures.
- Familiarity with network-stack and operating-system internals, including user mode, kernel mode, and boot processes, for GNU/Linux or an RTOS.
- Familiarity with x86, ARM, Hexagon, and PowerPC architectures and assembly.
- Proficiency with C, C++, Python, or Java and familiarity with Bash or PowerShell.
- Familiarity with development environments for GNU/Linux or Windows.
- Successful history authoring technical proposals and documents and leading advanced R&D or government-funded projects.
- Preferred: experience with side-channel attacks such as glitching; custom filesystem extraction and modification; OOB/CRC data removal or regeneration; and bus and protocol analysis.
- Ability to collaborate and communicate with multidisciplinary teams, leadership, and nontechnical personnel.
- Ability to balance multiple competing tasks and demands in a fast-paced environment.
- Ability to obtain and maintain a government TS/SCI security clearance.
Benefits
- Workplace flexibility and programs supporting work-life balance.
- Employee clubs, including photography and yoga.
- Health and finance workshops.
- Off-site social events and discounts to local museums and cultural activities.
- Full-time position located in Cambridge, Massachusetts.
