Cyber Security Software Engineer - GTRI - CIPHER - Open Rank

Georgia Tech Research Institute; Atlanta (GA); On-site; USD 90,000 - 140,000; Full time

Job summary

The Georgia Tech Research Institute invites applications for a Cyber Security Software Engineer in the Embedded Systems Vulnerability Division (ESVD) within CIPHER. You will design, develop, and test cybersecurity software in Java, C, and C++ using engineering principles to build resilient systems.

You will contribute to vulnerability assessments, prototype development, and software testing in realistic environments, collaborating with GT faculty to advance embedded security and ensure robust

Qualifications

• Experience with firmware/software reverse engineering.
• Experience with disassemblers such as Ghidra and IdaPro.
• Experience with 1 or more programming languages (e.g. Python, C/C++, Rust).

Responsibilities

• Perform software development, software testing/debugging, software modification/enhancement, and software documentation
• Develop and maintain kernel and user-level software and scripts
• Contribute to technical reports and presentations
• Assist with performing software assurance scans with tools approved by stakeholders
• Assist in static and dynamic analysis of software/firmware components of embedded system
• Assist in development of software analysis tools to assist in the reverse engineering process, implementing methods to help in determining software functionality
• Assist in development and use of virtual and emulation environments for executing software under test
• Assist in data protocol analysis (network, RF, etc)
• Perform digital forensics on computer and embedded equipment
• Participate in designing and/or testing of embedded circuit boards

Skills

Firmware reverse engineering

Ghidra/IDA Pro disassembly

Python

C/C++

Rust

Tools

Ghidra

IDA Pro

Job description

Overview:

The Georgia Tech Research Institute (GTRI) is the nonprofit, applied research division of the Georgia Institute of Technology (Georgia Tech).Founded in 1934 as the Engineering Experiment Station, GTRI has grown to more than 2,900 employees, supporting eight laboratories in over 20 locations around the country and performing more than $940 million of problem-solving research annually for government and industry.GTRI's renowned researchers combine science, engineering, economics, policy, and technical expertise to solve complex problems for the U.S. federal government, state, and industry.

Georgia Tech's Mission and Values

Georgia Tech's mission is to develop leaders who advance technology and improve the human condition. The Institute has nine key values that are foundational to everything we do:

1. Students are our top priority.
2. We strive for excellence.
3. We thrive on diversity.
4. We celebrate collaboration.
5. We champion innovation.
6. We safeguard freedom of inquiry and expression.
7. We nurture the wellbeing of our community.
8. We act ethically.
9. We are responsible stewards.

Over the next decade, Georgia Tech will become an example of inclusive innovation, a leading technological research university of unmatched scale, relentlessly committed to serving the public good; breaking new ground in addressing the biggest local, national, and global challenges and opportunities of our time; making technology broadly accessible; and developing exceptional, principled leaders from all backgrounds ready to produce novel ideas and create solutions with real human impact.

Project/Unit Description

The Embedded Systems Vulnerability Division (ESVD) within CIPHER leverages extensive expertise in hardware, software, network, and RF communications to identify and evaluate cyber vulnerabilities in military assets, industrial control systems, and critical infrastructure systems. The Division specializes in wireless and embedded devices such as radios, modems, routers and embedded controllers comprising various military and ICs networks. Red and Blue team activities focus on vulnerability discovery and the development and demonstration of multi-domain techniques to gain unauthorized access to and/or exploit information networks. These efforts identify weaknesses and help ensure that mitigations are effective. CIPHER researchers participate in Government working groups on topics relating to cyber vulnerability assessments and collaborate with Georgia Tech faculty on the security of embedded systems.

Job Purpose

The Cyber Security Software Engineer designs, develops, and tests cybersecurity software in languages such as Java, C, and C++. The Cyber Security Software Engineer requires extensive knowledge of programming languages, software development, and computer operating systems in order to apply engineering principles to software creation. The necessary skill areas for the Cyber Security Software Engineer include programming and coding, fundamentals of computer science, design and architecture, algorithms and data structures, information analysis, debugging software, and testing software. The Cyber Security Software Engineer also creates novel cyber security technology components and software to ensure that critical systems and information are resilient to cyber exploits and attacks. The researcher also performs attendant vulnerability assessments, analysis, and software engineering and design. The Cyber Security Software Engineer also develops hardware and software prototypes, and tests those prototypes in realistic environments.

Key Responsibilities

• Perform software development, software testing/debugging, software modification/enhancement, and software documentation
• Develop and maintain kernel and user-level software and scripts
• Contribute to technical reports and presentations
• Assist with performing software assurance scans with tools approved by stakeholders

Additional Responsibilities

• Assist in static and dynamic analysis of software/firmware components of embedded system
• Assist in development of software analysis tools to assist in the reverse engineering process, implementing methods to help in determining software functionality
• Assist in development and use of virtual and emulation environments for executing software under test
• Assist in data protocol analysis (network, RF, etc)
• Perform digital forensics on computer and embedded equipment
• Participate in designing and/or testing of embedded circuit boards

Required Minimum Qualifications

• Experience with firmware/software reverse engineering
• Experience with disassemblers such as Ghidra and IdaPro
• Experience with 1 or more programming languages (e.g. Python, C/C++, Rust)

Preferred Qualifications

• Active Secret Clearance
• Experience interacting with software test environments to include virtualized and emulative environments capable of executing