Associate Reverse Engineer Researcher

Reverse Engineer Researcher

The Software Engineering Institute (SEI) at Carnegie Mellon University is seeking an applicant for the role of a Reverse Engineer Researcher for the Threat Analysis directorate. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems.

What you'll do:

• Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, work to identify and address emerging and complex threats, and effectively participate in the broader security community
• Perform in-depth reverse engineering of malicious code, document and transition results in reports, presentations, and technical exchanges
• Explore ways to use artificial intelligence to support reverse engineering and apply reverse engineering practices to artificial intelligence systems
• Design, prototype, and transition new analysis methods and tools
• Identify and document emerging and complex active security threats
• Participate in the broader security community through collaboration, papers, and presentations

Who you are:

• You have BS in Computer Science or related discipline with three (3) years of experience; OR MS in the same fields with one (1) year of experience.
• You enjoy working on emerging and complex malware analysis and reverse engineering problems.
• You have an analytical mindset and deep curiosity about how software works.
• You have the ability to balance rapid prototyping with maintainable tool development.
• You have strong technical writing experience.
• You recognize and deal appropriately with confidential and sensitive information.
• You are able to handle continual shifting priorities.
• You enjoy mentoring and training others as well as sharing knowledge.
• You communicate effectively with technical and non-technical audiences.
• You have a willingness to travel to various locations to support the SEI's overall mission This includes sponsor sites, conferences, and offsite meetings on occasion. Moderate Travel (15%)
• You will be subject to a background check and obtain and maintain an active Department of War security clearance

You have experience with or knowledge of:

• Reverse engineering software binaries for a variety of architectures, both at the user level and kernel level
• Static analysis tools (e.g. IDA Pro, NSA Ghidra, Binary Ninja)
• User-level and kernel-level debuggers (e.g. x32dbg, x64dbg, gdb, Win Dbg)
• Native programming languages (e.g. C/C++)
• High-level programming languages (e.g. Java, Python, GoLang, etc.)
• Software engineering and design concepts
• Firmware and device driver development
• Malware tradecraft and threat actor tactics, techniques, and procedures (TTPs)
• Malware signature creation and use, independent of detection technology
• Operating system concepts and internals and binary file formats (e.g. PE, ELF, Mach-O, etc.)
• Internet Protocols and network analysis tools (e.g. Wireshark, netcat, etc.)
• Compiler theory, cryptography, and malware deobfuscation techniques.
• Mobile device development and reverse engineering
• Malware sandboxes or instrumentation frameworks (e.g., Frida, QEMU, Unicorn Engine).
• General understanding and experience in artificial intelligence and machine learning and using artificial intelligence to support reverse engineering and malware analysis

Why work here?

• Join a world-class organization that has significant impact on software
• Work with cutting edge technologies and experts to solve tough problems for the government and the nation
• Get 8% monthly contribution for your retirement, without having to contribute yourself
• Get tuition benefits to CMU and other institutions for you and your dependent children
• Enjoy a healthy work/life balance with flexible work arrangements and paid parental and military leave
• Get access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System
• Enjoy annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies
• Qualify for relocation assistance and so much more