Sr. Principal Reverse Engineering/Vulnerability Research Engineer

Position Summary

As a member of the Security Research team, you will imagine weaknesses in multiple types of systems and then find, demonstrate/document, and exploit those weaknesses. You will be joining a team of mature and extremely competent Security Researchers to breakdown and fully understand how a host of different systems function. You will need to leverage extensive experience performing static and dynamic analysis and must be familiar with multiple classes of vulnerabilities. Additionally, you must be extremely comfortable communicating with team members, technical partners, and non-technical partners alike. The ideal candidate will be comfortable and confident operating at the early phases of a vulnerability research project and have the mettle to see the project through to multiple phases and iterations.

Role Expectations

• Perform vulnerability research and reverse engineering for customer tasks
• Perform advanced static and dynamic analysis using disassemblers, debuggers, emulators, tracers, and fuzzers
• Develop reliable proof-of-concept and operational exploit capabilities leveraging discovered vulnerabilities
• Research and bypass modern exploit mitigations security mechanisms
• Build internal tooling, automation, and research infrastructure to accelerate vulnerability discovery and analysis
• Perform root-cause analysis on vulnerabilities and communicate findings to technical and non-technical stakeholders
• Communicate security research findings internally and, when and where appropriate, externally Mentor fellow security researchers
• Lead small to medium sized teams of Security Researchers for full project lifecycle to include: project design, kickoff, execution and delivery

Requirements

• LLM-assisted RE/VR experience
• Static and Dynamic UNIX RE experience, but Windows as well as UNIX is a plus (only UNIX is required)
• Exploit development defeating security mitigations experience
• Experience writing custom RE tools such as fuzzers, decompiler plugins, and program analysis tools
• UNIX kernel RE/VR experience
• Exploit development defeating modern security mitigations experience
• Hardware RE/VR experience
• Experience integrating productized capabilities into CNO tools
• Team lead experience
• Experience working with customers to develop requirements
• Ability to collaborate with CNO teams to integrate productized capabilities