Cyber Reverse Engineer

CACI; Sterling (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

CA-C I? CACI International Inc. is seeking a Cyber Reverse Engineer in Sterling, VA to tackle national security cyber and hardware challenges.

You will investigate embedded software/hardware devices, analyze binaries, and perform protocol analysis, contributing to a fast-paced, collaborative R&D environment. Ideal candidates possess TS/SCI clearance, a BS in a related field, and 5+ years of experience with assembly, scripting, virtualization, and binary analysis tools like IDA Pro and Ghidra.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Computer Engineering, or Electrical Engineering.

Responsibilities

• Analyze and reverse engineer software binaries and embedded firmware on traditional and embedded systems to identify functional behavior.
• Conduct code review and vulnerability analysis on software/firmware to identify potential weaknesses or access vectors.
• Perform protocol analysis of communication channels.
• Perform static and dynamic analysis of software and firmware using tools like IDA Pro, Ghidra, x64Dbg, GDB, and Sysinternals to research the behavior of binaries.
• Draft and deliver technical reports related to the scope, nature, and characteristics of the assessed software/firmware to both technical and non-technical audiences.
• Brief the customer and accurately capture findings of your analysis in writing.

Skills

Reverse engineering

Assembly analysis

Scripting

Virtualization

Protocol analysis

Education

Bachelor's degree in CS/SE/CE/EE

Tools

IDA Pro

Ghidra

WinDbg

Binary Ninja

Qemu

Job description

Job Title: Cyber Reverse Engineer

Job Category: Engineering

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

The Opportunity:

Join our unique team solving wide-ranging national security cyber and hardware challenges. Use your skills in interesting projects involving cyber reverse engineering and vulnerability research.

Responsibilities include investigating embedded software/hardware devices, understanding digital communication implementations, and analyzing embedded binaries for protocol vulnerabilities. An ideal candidate can balance multiple projects in a fast-paced, interdisciplinary, R&D environment. The candidate excels at working effectively individually and on a team through their excellent communication skills and technical acumen.

Be part of a CACI department with an expanding range of programs focusing on Cyber Operations, where you get to grow on and between programs with peers who are dedicated to advancing national security. Participate in interesting team events where you get to engage with your co-workers and expand your career network. We have an engaging environment with a management team focused on growing your career and making you a part of our future.

We offer bonus compensation plans that demonstrate our appreciation for your dedication to the program and being a part of our team. You'll get paid for cyber events and training, such as our Capture the Flag Events, Internal Research and Development opportunities, as well as prepaid courses to nationally recognized certification courses to grow your career.

Responsibilities:

• Analyze and reverse engineer software binaries and embedded firmware on traditional and embedded systems to identify functional behavior.
• Conduct code review and vulnerability analysis on software/firmware to identify potential weaknesses or access vectors.
• Perform protocol analysis of communication channels.
• Perform static and dynamic analysis of software and firmware using tools like IDA Pro, Ghidra, x64Dbd, GDB, and Sysinternals to research the behavior of binaries.
• Perform pattern analysis to identify critical information.
• Draft and deliver technical reports related to the scope, nature, and characteristics of the assessed software/firmware to both technical and non-technical audiences.
• Brief the customer and accurately capture in writing the findings of your analysis.

Qualifications:

Required:

• Active Top Secret clearance with ability to obtain SCI
• Bachelors of Science degree in Computer Science, Software Engineering, Computer Engineering, or Electrical Engineering.
• 5+ years of relevant work experience
• Experience analyzing and reverse engineering Assembly binaries (x86 and/or ARM, AVR)
• Experience with scripting languages such as Python and Unix Shell scripts
• Experience using virtualization technologies (VMware, VirtualBox, Docker)
• Experience using binary analysis tools such as IDA Pro, Ghidra, WinDbg, Binary Ninja
• Experience reverse engineering embedded firmware images
• Experience with user/system level emulation tools such as Qemu

Desired:

• Understanding of software development using C/C++ for Linux and/or Windows OS systems
• Active TS/SCI or TS/SCI Polygraph clearance
• Understanding of embedded firmware development for various microcontroller families
• Understanding of techniques for binary analysis to identify functionality and vulnerabilities in various applications, embedded firmware, systems and communications
• Understanding of memory management concepts (Heap, Stack, Virtual Memory)
• Familiarity with encryption & hashing methods and algorithms (3DES, AES, RSA, MD5, SHA, CRC, etc.)
• Background in ethical hacking and/or testing software vulnerabilities with a working knowledge of hacking tools and techniques such as memory corruption exploits, buffer overflows, rootkits, protocol poisoning, MetaSploit, nmap, etc.
• Reverse Engineering Certifications (e.g. GIAC Reverse Engineering Malware (GREM) )
• Cybersecurity certifications (e.g. OSCP, OSED, Security+)

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.

What You Can Expect:

• A culture of integrity. At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.
• An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
• A focus on continuous growth. Together, we will advance our n