Senior Principal Cybersecurity Engineer

• Research and develop production-ready cybersecurity capabilities, develop reverse engineering tools and other cyber research instrumentation
• Develop, enhance and customize security capabilities, tooling and instrumentation
• Communicate security research findings to production engineering teams around the world, ensuring integration into platforms and products
• Collaborate with open-source organizations to ensure quality of our open-source cybersecurity stack, including making quality and feature improvements
• Conduct experiments to test the limits of state-of-the-art technologies to uncover weaknesses and vulnerabilities
• Translate research findings into patents, blog posts, and conference publications
• Maintain an up-to-date awareness of offensive and defensive cybersecurity activities in the public/commercial domain and working to accelerate cyber operations as appropriate
• Break down long-term efforts into discrete tasks that demonstrate incremental progress
• Guide product teams through integration of new cybersecurity system designs and testing methodologies
• Defend research viewpoints to senior and executive leadership by providing compelling information and evidence

• 5+ years’ experience in cybersecurity engineering, development of cryptographic libraries/protocol stacks, vulnerability research, or reverse engineering
• 5+ years’ experience with C, assembly (ARM, MIPS, RISC-V, Intel , proprietary architectures, etc.), or similar low-level /embedded development
• 3+ years’ experience with:
  1) host-based virtualization (VMware workstation, QEMU-KVM, Xen, etc.) and emulation technologies (QEMU, Simics, etc.);
  2) conducting offensive cyber research such as vulnerability research and exploit development against embedded systems;
  3) scripting languages like Python in a Linux-like environment; and
  4) debugging embedded systems (JTAG, UART, proprietary debugging environment, etc)
• Familiarity with embedded systems development and use of cryptography and/or communications implementations
• Good organization, communication, collaboration and interpersonal skills
• A go-getter that is passionate to learn about new security vulnerabilities and develop assessment automation solutions
• Interest and/or experience with bug bounties, capture-the-flag competitions, etc.
• Experience proposing and executing independent research and development tasks and writing conference-level technical reports
• Familiarity with version control systems and code review processes

Demonstrates extensive experience in cybersecurity engineering, including vulnerability research, reverse engineering, and development of cryptographic libraries. Proficient in low-level programming and familiar with virtualization and emulation technologies, with strong communication and collaboration skills to integrate findings into production environments.

• Cybersecurity Engineering
• Vulnerability Research
• C Programming
• Reverse Engineering
• Offensive Cyber Research

• Cryptographic Libraries
• Low-Level Development
• Scripting Languages
• Debugging Embedded Systems
• Host-Based Virtualization

• Communication
• Collaboration
• Organization
• Interpersonal Skills

• Embedded Systems
• Cybersecurity Stack
• Bug Bounties
• Capture-The-Flag Competitions
• Technical Reports

• VMware Workstation
• QEMU-KVM
• Xen
• JTAG
• UART