Security Researcher​/Systems Hacker

Overview

Riverside Research is an independent National Security nonprofit dedicated to research and development in the national interest. We provide high-end technical services, research and development, and prototype solutions to challenging technical problems. All Riverside Research opportunities require U.S. Citizenship.

Security Researcher / Systems Hacker

US-MA-Lexington

:

Research & Development

Full Time Salary

This role is within Riverside Research's Secure and Resilient Systems group. The researcher will focus on systems security research and contribute to applied research projects from ideation through transition, including architecture design, planning, prototyping, experimentation, and publication or briefing of results. Projects may involve systems software (e.g., RTOS, secure hypervisors), computer architecture (e.g., tagged architectures), peripheral hardware (e.g., device drivers, FPGA hardware, bus protocols), compiler extensions (e.g., LLVM passes, custom backends), and program analysis (e.g., fuzzer implementation, symbolic execution).

Awareness of cryptography, formal methods and reverse engineering is valuable for collaboration within the group.

Successful candidates will decompose complex problems and communicate with both technical and non-technical stakeholders. The role requires the ability to explain complex concepts clearly and to work with a diverse team.

• Help design and implement innovative solutions to customer problems related to systems software security
• Prototype and evaluate features within large system software projects (e.g., Linux, Xen, QEMU, etc.)
• Build new tools, features, and capabilities in languages such as C/C++, Python, Rust, Assembly, etc.
• Contribute to whitepapers and/or published papers documenting innovative work
• Document and communicate design decisions, technical challenges, and progress to technical and non-technical stakeholders
• Collaborate with team members on debugging programs, pair programming, and reviewing papers/proposals

Required:

• Thesis-based MS degree with 3+ years of experience or PhD in a related technical field (e.g., computer science, computer engineering, electrical engineering, cybersecurity); equivalent work experience may substitute
• Strong systems software development fundamentals with proficiency in C/C++, Assembly (one or more architectures), and Python; knowledge of computer architecture, operating systems, and compilers
• Strong software development fundamentals (source control, documentation, debugging, tool chains, build systems)
• Experience contributing to large projects (e.g., submitting PRs, open-source collaboration, git workflows, tiered build systems)
• Strong grasp of the research process (reading/writing academic papers, ideation for innovative solutions)
• Superior written and verbal communications skills
• Must be eligible to obtain a Top Secret security clearance

Bonus / Desired:

• Balance between technical focus and business acumen
• Ability to work independently with limited supervision and collaborate with technical staff and business leaders
• Experience with both defensive and offensive cyber tools
• Familiarity with seL4, Rust, LLVM, AFL++, or other cutting-edge system software languages and tools
• Existing or prior security clearance

$95,000 - $200,000. This represents the typical compensation range for this position based on experience, location, and other factors.

Riverside Research Institute is a not-for-profit, technology-oriented defense company. Riverside is an affirmative action-equal opportunity employer and complies with all applicable federal, state, and local laws regarding recruitment and hiring. Riverside bases its employment decisions solely on technical experience, qualifications, and other job-related criteria, and without regard to race, color, religion, age, sex, marital status, sexual orientation, national origin, disability, veteran status, or any other legally protected status.