Cybersecurity Researcher Reverse Engineer

Cybersecurity Researcher Reverse Engineer

Location:

CO - Golden

Position Type:
Regular

Hours Per Week: 40

We are seeking a skilled Cybersecurity Researcher Reverse Engineer to join our Cyber Threat Analysis Group within the Cybersecurity Research Center. The role requires analyzing, deconstructing, and evaluating the security of highly complex embedded devices and systems critical to the nation's energy infrastructure and national security.

Responsibilities include deep-dive vulnerability research on hardware and firmware found in Industrial Control Systems (ICS), smart grid components, electric vehicle supply equipment (EVSE), and distributed energy resources (DERs). You will reverse engineer proprietary systems to uncover zero-day vulnerabilities, develop reliable exploits in constrained environments, and design system-level mitigations to secure the energy grid against advanced persistent threats (APTs).

• Design and deploy advanced discovery techniques against black-box embedded systems. Implement custom fuzzing harnesses for hardware-in-the-loop and emulated environments.
• Develop robust, weaponized proof-of-concept (PoC) exploits for constrained environments. Bypass embedded exploit mitigations. Write custom shellcode and achieve persistent execution within RTOS or bare-metal environments.
• Intercept, reverse engineer, and exploit communications across all layers. Analyze local hardware buses (CAN, I2C, SPI), industrial control protocols (Modbus, DNP3, IEC 61850 GOOSE/SV, CIP/Ether Net/IP), and modern Smart Grid/EV protocols (OCPP, IEEE 2030.5, MQTT).
• Perform static and dynamic analysis of compiled binaries, RTOS (e.g., VxWorks, QNX, FreeRTOS), and bare-metal systems. Reverse engineer boot sequences, evaluate kernel-level internals, and identify privilege escalation vectors from user-space tasks to the kernel or hypervisor.
• Defeat hardware security mechanisms and extract firmware using debug interfaces (JTAG, UART, SWD). Execute advanced hardware attacks, including side-channel analysis and fault injection (glitching), to extract cryptographic keys or bypass authentication.
• Translate highly technical vulnerability findings and exploitation mechanics into actionable intelligence. Brief technical peers, leadership, and federal stakeholders on systemic risks to critical infrastructure and propose hardware/software mitigations.

• Solves uniquely significant problems:
  Defeats advanced hardware security mechanisms (Secure Boot, Trust Zone) utilizing novel techniques like side-channel analysis and fault injection.
• Serves as a technical authority:
  Briefs federal stakeholders and influences directorate-level strategy regarding systemic risks to critical infrastructure.
• Translates national needs:
  Directly addresses national security priorities by developing advanced mitigations against Advanced Persistent Threats (APTs) targeting the energy grid.
• Drives lab-wide capability:
  Architects and maintains custom reverse engineering plugins and automation frameworks utilized by multiple teams across the laboratory.
• Mentors at the lab level:
  Serves as a recognized expert, mentoring staff across the organization in highly specialized areas like kernel-level privilege escalation and deep firmware analysis.

• Solves complex problems:
  Develops robust proof-of-concept exploits and performs deep static/dynamic analysis on constrained embedded environments.
• Leads project-level decisions:
  Designs and deploys advanced vulnerability discovery techniques, including custom fuzzing harnesses and symbolic execution.
• Applies broad engineering concepts:
  Adapts established principles to bypass exploit mitigations (e.g., ASLR, DEP/NX) on ARM, MIPS, and PowerPC architectures.
• Coordinates project efforts:
  Guides the technical execution of intercepting and analyzing complex hardware buses (CAN, SPI) and industrial protocols (Modbus, DNP3).
• Represents the laboratory:
  Translates highly technical vulnerability findings into actionable intelligence for internal peers and project leadership.

• Relevant PhD and 4 or more years of experience, OR relevant Master's Degree and 7 or more years of experience, OR relevant Bachelor's Degree and 9 or more years of experience.
• Demonstrated in-depth knowledge of laws, regulations, principles, procedures and practices related to specific field.
• Excellent leadership, communication, problem solving and project management skills.
• Ability to use various computer software programs.

• Relevant PhD, OR relevant Master's Degree and 3 or more years of experience, OR relevant Bachelor's Degree and 5 or more years of experience.
• Demonstrates broad understanding and wide application of engineering technical procedures, principles, theories and concepts in the field.
• General knowledge of other related disciplines.
• Demonstrates leadership in one or more areas of team, task or project lead responsibilities.
• Demonstrated…