Senior Embedded Vulnerability Researcher

Overview

On Site
Full Time

Skills

Mergers and acquisitions
Computer hardware
Design
Analytical skill
Mentorship
Problem solving
Computer science
Computer engineering
Cyber security
Technical drafting
Leadership
Research and Development
Management
Team leadership
Effective communication
Collaboration
Research
Firmware
File systems
Reverse engineering
GDB
Program evaluation
Instrumentation
Soldering
JTAG
Data extraction
NAND
SPI
Adobe Flash
Embedded systems
Network
Operating systems
RTOS
Assembly
x86
ARM
PowerPC
Programming languages
C
C++
Python
Java
Scripting
Bash
Windows PowerShell
Linux
Microsoft Windows

Job Details

Location: Cambridge, MA
Salary: Depends on Experience
Description: The Judge Group is seeking a Senior Embedded Vulnerability Researcher for a full time hybrid opportunity in Cambridge, MA or Reston, VA

Job Responsibilities:
  • Evaluate hardware and software to identify security vulnerabilities.
  • Develop secure software solutions tailored to specific requirements.
  • Collaborate across teams to enhance software performance and security.
  • Innovate tools and methodologies to uncover and address system vulnerabilities.
  • Document system functionalities and modifications.
  • Lead complex problem-solving initiatives and adapt to evolving requirements.
  • Offer insights and recommend design changes based on analytical findings.
  • Identify and mitigate technical risks at the program/system level.
  • Mentor junior engineers and contribute to their professional growth.
  • Perform additional duties as necessary.
  • Employ a curiosity-driven approach to complex problem-solving within a multidisciplinary team.
  • Communicate effectively with team members and program leadership.


Education and Experience:

  • Bachelor's degree in Computer Science, Computer Engineering, or a related field.
  • 5-10 years of experience in Cybersecurity or a related discipline.
  • Proven track record in drafting technical proposals and leading advanced R&D projects
  • Experience managing significant programs and leading teams.
  • Effective communication and collaboration skills with technical and non-technical stakeholders.
Preferred Qualifications:
  • Experience with side-channel attacks to manipulate device states and bypass security measures.
  • Knowledge in custom filesystem manipulation and bprotocol analysis.

Technical Expertise:
  • Mastery in Program Analysis, Reverse Engineering, and Vulnerability Research.
  • Advanced knowledge of contemporary program analysis methods, both static and dynamic.
  • Proficient in reverse-engineering techniques for firmware and embedded systems.
  • Understanding of binary files, filesystem structures, and formats.
  • Skilled in reverse engineering tools, including Ghidra, IDA, GDB, and RR.
  • Experienced in program analysis and physical device instrumentation, including soldering.
  • Knowledgeable in JTAG/SWD/BDM and data extraction from eMMC/NAND/SPI flash.
  • Techniques for exploiting vulnerabilities in embedded devices across various platforms.
  • Comprehensive understanding of network stacks and operating system internals, including boot processes for GNU/Linux or RTOS.
  • Proficiency in multiple architectures and assembly languages: x86, ARM, Hexagon, PowerPC.

Programming Languages and Development:
  • Proficient in programming languages: C, C++, Python, Java.
  • Familiar with scripting in Bash and Powershell.
  • Comfortable in development environments for GNU/Linux and Windows.


Contact:

This job and many more are available through The Judge Group. Please apply with us today!
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

About Judge Group, Inc.