Lead, Security Research Engineer

L3Harris; Ottawa; On-site; CAD 80,000 - 140,000; Full time

Job summary

An elite global team is seeking a skilled engineer to join their ranks in developing world-class security products. This role involves identifying vulnerabilities in widely used software and devices, constructing exploits, and engaging in cutting-edge research and development in security technologies. You'll work closely with a dedicated team, contributing to innovative solutions that address national security needs. If you are passionate about cybersecurity and have a proven track record in vulnerability research, this is an exciting opportunity to make a significant impact in the defense industry. Join a company that values excellence and empowers its employees to thrive.

Qualifications

• 9+ years of experience in vulnerability research or exploit development.
• Strong background in static and dynamic binary analysis.

Responsibilities

• Identify vulnerabilities in software and firmware.
• Develop exploits for discovered vulnerabilities.
• Collaborate on cross-team projects.

Skills

Vulnerability Research

Exploit Development

Static and Dynamic Binary Analysis

Reverse Engineering

C/C++

Python

Security System Features

Teaching and Mentoring

Education

Bachelor’s Degree

Graduate Degree

Tools

IdaPro

Ghidra

Radare

Binary Ninja

AFL

SysInternals

GDB

WinDBG

Job description

L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

L3Harris Technologies is the Trusted Disruptor in the defense industry. With customers’ mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.

About Trenchant:

Trenchant is an elite global team of engineers and security researchers charged with building world-class computer security products.

Trenchant’s expertise is the by-product of the L3Harris acquisition of two highly-regarded information security businesses – Azimuth Security and Linchpin Labs. United under Trenchant, we are a key component of L3Harris’ Cyber Division.

We are a trusted, discrete partner furnishing security products, consultancy, training and integration services to allied security, defence, and law enforcement agencies.

Job Description:

• Finding vulnerabilities in ubiquitous Internet-deployed software and/or popular devices’ software or firmware
• Constructing exploits for vulnerabilities discovered by you or other research staff
• Research & development on security technologies in such fields as exploitation, bug-finding, reverse engineering and static analysis
• Working with and for officers, employees or contractors of the company
• Regular interaction with managers to field queries and questions
• Take an active role in cross-team projects when needed

Qualifications:

• Bachelor’s Degree and minimum 9 years of prior relevant experience. Graduate Degree and a minimum of 7 years of prior related experience. In lieu of a degree, minimum of 13 years of prior related experience

Preferred Additional Skills:

• Experience performing vulnerability research and/or exploit development.
• Experience with static and dynamic binary analysis.
• Experience with iOS, Android, Windows, Linux, or embedded systems kernel, user land, and internals or browser internals.
• Experience with common tools in security research (e.g. IdaPro, Ghidra, Radare, Binary Ninja, AFL, SysInternals, GDB, WinDBG, etc).
• Experience with common programming languages (e.g. C/C++, Python, Swift, etc).
• Experience with common architectures (e.g. x86/64, ARM, AARCH64, MIPS, PowerPC, TILEGX, etc).
• Experience with modern security system features, exploit mitigations, and evasion techniques (e.g. defeating ASLR, DEP, Control Flow Guard, ROP, Security Product/AV Evasion, etc).
• Experience with a wide range of modern exploitation concepts and techniques
• Service in the US/CA/UK/AU/NZ Intelligence Community or US/CA/UK/AU/NZ Military working in cyber operations.
• Evidence of a successful track record in vulnerability research through CVEs.
• Experience teaching and mentoring junior vulnerability researchers.

Eligibility Criteria:

• Must be eligible for registration with the Controlled Goods Program;
• Must be eligible to obtain and maintain a government of Canada “Reliability” status and Level 2 (Secret) security clearance;