Senior Cyber Reverse Engineer

Overview

At PNNL, our core capabilities are divided among major departments that we refer to as Directorates within the Lab, focused on a specific area of scientific research or other function, with its own leadership team and dedicated budget.

Our Science & Technology directorates include National Security, Earth and Biological Sciences, Physical and Computational Sciences, and Energy and Environment. In addition, we have an Environmental Molecular Sciences Laboratory, a Department of Energy, Office of Science user facility housed on the PNNL campus.

The National Security Directorate (NSD) drives science-based, mission-focused solutions to take on complex,real-world threats to our nation and the world.

The Emerging Threats and Technologies Division, part of the National Security Directorate, consists of over 400 scientists, engineers, and analysts with backgrounds in cyber, nuclear, intelligence, policy, data science, and other fields. We work in interdisciplinary project teams to provide innovative concepts that integrate policy, analytics, science, and technology into unique solutions.

PNNL is looking for a senior cyber security engineer with a focus in software reverse engineering. The applicant should be experienced in static and dynamic software analysis, well versed in cyber threat modalities, and interested in joining a growing team of IT/OT experts. A passion for understanding unique systems and being able to communicate both the problem and potential mitigations is critical.

This position is expected to take on task leadership, help mentor junior engineers, and advise project leadership on novel directions for investigations.

• Designs, deploys, and operates systems, networks, applications, and tools that underpin cyber security and cyber defense.
• Provides integration of hardware, software, and other components to solve operational challenges for cyber defenders.
• Performs data and systems engineering functions to support cyber operations activities and systems.
• Engineers and deploys security and defensive countermeasures and controls.
• Ensures system security needed in operations are assessed, established, and included in design and development; executes security requirements definition, systems analysis, systems design, security hardening, security test and evaluation, and certification and accreditation.
• Supports operational systems and performs activities such as vulnerability scanning, network, and system security configuration, etc.
• Design and architecture of new approaches, methods and techniques for cyber defense and resiliency for information technology and operational technology systems and networks.
• May interface with external entities including law enforcement, intelligence and other government organizations and agencies.

Minimum Qualifications:

• BS/BA and 7+ years of relevant work experience
  -OR-
• MS/MA and 5+ years of relevant work experience
  -OR-
• PhD with 3+ year of relevant experience

Preferred Qualifications:

• Experience with one or more disassemblers (IDA Pro, Binary Ninja, Ghidra).
• Experience with one or more assembly languages (x86, ARM, RISCV, PPC, etc).
• Comfortable with software development in compiled and scripting languages (C, C++, Rust, Python, etc).
• Experience with object files, compilers, linkers, loaders, and debuggers (ELF, DWARF, GDB, LLVM).
• Experience with both static and dynamic program analysis techniques.
• Experience with reverse engineering firmware and/or embedded systems from OT devices.
• Experience with emulation frameworks (QEMU, Renode).
• Experience with software exploitation techniques and modern mitigations.

Not Applicable

This position requires the ability to obtain and maintain a federal security clearance.

A security clearance background investigation includes review of your employment, education, financial, and criminal history, as well as interviews with you and your personal references, neighbors, and co-workers to determine trustworthiness, reliability, and loyalty to the United States. The investigation also examines your foreign connections, drug and alcohol use, foreign influence, and overall conduct.

Requirements:

• U.S. Citizenship
• Background Investigation:
  Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter in accordance with 10 CFR 710, Appendix
  
  B.
• Drug Testing:
  All Security Clearance positions are Testing Designated Positions, which means that the applicant selected for hire is subject to pre-employment drug testing, and post-employment random drug testing. In addition, applicants must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP).

Note:

Applicants will be considered ineligible for security clearance processing by the U.S. Department of Energy if non-use of…