Lead, Security Research Engineer

Harris Geospatial Solutions; Ottawa; On-site; CAD 80,000 - 120,000; Full time

Job summary

An elite global team is seeking a passionate security researcher to uncover vulnerabilities in widely-used software and devices. This role involves constructing exploits and conducting research on cutting-edge security technologies. The ideal candidate will have extensive experience in vulnerability research, exploit development, and a strong background in programming and analysis. Join a forward-thinking company that values innovation and excellence, providing a dynamic work environment that fosters professional growth and collaboration. If you're ready to make a significant impact in the cybersecurity field, this opportunity is for you.

Benefits

Flexible Work Hours

Health and Dental Benefits

Professional Development Opportunities

Employee Assistance Program

Work-Life Balance Initiatives

Qualifications

• 9+ years of experience in vulnerability research and exploit development.
• Strong understanding of modern security features and exploit mitigations.
• Experience mentoring junior researchers in vulnerability analysis.

Responsibilities

• Identify vulnerabilities in software and firmware of popular devices.
• Develop exploits for discovered vulnerabilities.
• Collaborate with teams on cross-functional projects.

Skills

Vulnerability Research

Exploit Development

Static and Dynamic Binary Analysis

iOS Development

Android Development

C/C++ Programming

Python Programming

Education

Bachelor's Degree

Graduate Degree

Tools

IdaPro

Ghidra

Radare

Binary Ninja

AFL

SysInternals

GDB

WinDBG

Job description

L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

L3Harris Technologies is the Trusted Disruptor in the defense industry. With customers’ mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.

About Trenchant:

Trenchant is an elite global team of engineers and security researchers charged with building world-class computer security products.

Trenchant’s expertise is the by-product of the L3Harris acquisition of two highly-regarded information security businesses – Azimuth Security and Linchpin Labs. United under Trenchant, we are a key component of L3Harris’ Cyber Division.

We are a trusted, discrete partner furnishing security products, consultancy, training and integration services to allied security, defence, and law enforcement agencies.

Job Description:

• Finding vulnerabilities in ubiquitous Internet-deployed software and/or popular devices’ software or firmware
• Constructing exploits for vulnerabilities discovered by you or other research staff
• Research & development on security technologies in such fields as exploitation, bug-finding, reverse engineering and static analysis
• Working with and for officers, employees or contractors of the company
• Regular interaction with managers to field queries and questions
• Take an active role in cross-team projects when needed

Qualifications:

• Bachelor’s Degree and minimum 9 years of prior relevant experience. Graduate Degree and a minimum of 7 years of prior related experience. In lieu of a degree, minimum of 13 years of prior related experience

Preferred Additional Skills:

• Experience performing vulnerability research and/or exploit development.
• Experience with static and dynamic binary analysis.
• Experience with iOS, Android, Windows, Linux, or embedded systems kernel, user land, and internals or browser internals.
• Experience with common tools in security research (e.g. IdaPro, Ghidra, Radare, Binary Ninja, AFL, SysInternals, GDB, WinDBG, etc).
• Experiencewith common programming languages (e.g. C/C++, Python, Swift, etc).
• Experiencewith common architectures (e.g. x86/64, ARM, AARCH64, MIPS, PowerPC, TILEGX, etc).
• Experience withmodern security system features, exploit mitigations, and evasion techniques (e.g. defeating ASLR, DEP, Control Flow Guard, ROP, Security Product/AV Evasion, etc).
• Experience with a wide range of modern exploitation concepts and techniques
• Service in the US/CA/UK/AU/NZ Intelligence Community or US/CA/UK/AU/NZ Military working in cyber operations.
• Evidence of a successful track record in vulnerability research through CVEs.
• Experience teaching and mentoring junior vulnerability researchers.

Eligibility Criteria:

• Must be eligible for registrationwith theControlled Goods Program;
• Must be eligible to obtain and maintain a government of Canada“Reliability”status andLevel 2 (Secret)security clearance;

Our culture:

L3Harriscultivates an inclusive and stimulating work environment that empowers employees and promotes work-life balance. Our values (integrity, respect, excellence), community dedication and commitment to excel in everything we do are the foundation of our culture.

L3Harris is proud to be an equal opportunity employer and is committed to treating all of its employees and job applicants with respect and dignity and to maintaining a workplace free from discrimination. Anyone applying for a position will be considered without regard to the following: race, national or ethnic origin, colour, religion, age, nationality, ancestry, ethnicity, gender, sex, sexual orientation, gender identity or expression, marital status, family status, genetic characteristics, disability, citizenship status, or conviction for an offence for which a pardon has been granted or in respect of which a record suspension has been ordered, or any other characteristic that is protected by applicable human rights legislation.

L3Harris maintains a drug-free workplace and conducts pre-employment drug and alcohol testing and background checks, in accordance with applicable law. Such results are only accessible and viewed by individuals at L3Harris who have direct responsibility in the hiring process. If you fail to report for a drug and alcohol test, refuse to undergo such test or test positive for the presence of drugs or alcohol, the hiring process may be concluded or your offer of employment may be rescinded, in L3Harris’ sole discretion.

At L3Harris, we foster an inclusive and equitable workplace. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. For applicants with disabilities, we will provide you with accommodation so that you have what you need in order to be at your best.

L3Harris performs background checks prior to employment as all applicants must be eligible for registration with the Controlled Goods Program and obtain and maintain a positive security assessment. Some positions may require a government of Canada “Reliability” status and/or Level 2 (Secret) security clearance. In addition, L3Harris performs pre-employment substance abuse testing where required.