Cyber Security Software Engineer - GTRI - CIPHER - Open Rank

Georgia Tech Research Institute (GTRI); Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Job summary

Georgia Tech Research Institute (GTRI) in Atlanta, GA seeks a Cyber Security Software Engineer to design, develop, and test cybersecurity software for embedded systems and critical infrastructure. You will apply programming in Java, C, C++, and perform vulnerability assessments within a government/industry context.

The role emphasizes reverse engineering, hardware/software prototyping, and collaboration with CIPHER researchers to strengthen resilience against cyber exploits.

Qualifications

• Experience with firmware/software reverse engineering.
• Experience with disassemblers such as Ghidra and IdaPro.
• Experience with 1 or more programming languages (e.g. Python, C/C++, Rust).
• Candidates must be a U.S. citizen and able to obtain an active security clearance.

Responsibilities

• Perform software development, testing, debugging, modification, and documentation.
• Develop and maintain kernel and user-level software and scripts.
• Contribute to technical reports and presentations.
• Assist with software assurance scans using stakeholder-approved tools.
• Analyze embedded software/firmware and assist in reverse engineering efforts.

Skills

Firmware reverse engineering

Ghidra

IDA Pro

Python

C/C++

Rust

Education

Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or related field

Tools

VMware

VirtualBox

QEMU

Unicorn

Job description

Overview:

The Georgia Tech Research Institute (GTRI) is the nonprofit, applied research division of the Georgia Institute of Technology (Georgia Tech).Founded in 1934 as the Engineering Experiment Station, GTRI has grown to more than 2,900 employees, supporting eight laboratories in over 20 locations around the country and performing more than $940 million of problem-solving research annually for government and industry.GTRI's renowned researchers combine science, engineering, economics, policy, and technical expertise to solve complex problems for the U.S. federal government, state, and industry.

Georgia Tech's Mission and Values

• Students are our top priority.


• We strive for excellence.


• We thrive on diversity.


• We celebrate collaboration.


• We champion innovation.


• We safeguard freedom of inquiry and expression.


• We nurture the wellbeing of our community.


• We act ethically.


• We are responsible stewards.

Over the next decade, Georgia Tech will become an example of inclusive innovation, a leading technological research university of unmatched scale, relentlessly committed to serving the public good; breaking new ground in addressing the biggest local, national, and global challenges and opportunities of our time; making technology broadly accessible; and developing exceptional, principled leaders from all backgrounds ready to produce novel ideas and create solutions with real human impact.

Over the next decade, Georgia Tech will become an example of inclusive innovation, a leading technological research university of unmatched scale, relentlessly committed to serving the public good; breaking new ground in addressing the biggest local, national, and global challenges and opportunities of our time; making technology broadly accessible; and developing exceptional, principled leaders from all backgrounds ready to produce novel ideas and create solutions with real human impact.

Project/Unit Description

The Embedded Systems Vulnerability Division (ESVD) within CIPHER leverages extensive expertise in hardware, software, network, and RF communications to identify and evaluate cyber vulnerabilities in military assets, industrial control systems, and critical infrastructure systems. The Division specializes in wireless and embedded devices such as radios, modems, routers and embedded controllers comprising various military and ICs networks. Red and Blue team activities focus on vulnerability discovery and the development and demonstration of multi-domain techniques to gain unauthorized access to and/or exploit information networks. These efforts identify weaknesses and help ensure that mitigations are effective. CIPHER researchers participate in Government working groups on topics relating to cyber vulnerability assessments and collaborate with Georgia Tech faculty on the security of embedded systems.

Job Purpose

The Cyber Security Software Engineer designs, develops, and tests cybersecurity software in languages such as Java, C, and C++. The Cyber Security Software Engineer requires extensive knowledge of programming languages, software development, and computer operating systems in order to apply engineering principles to software creation. The necessary skill areas for the Cyber Security Software Engineer include programming and coding, fundamentals of computer science, design and architecture, algorithms and data structures, information analysis, debugging software, and testing software. The Cyber Security Software Engineer also creates novel cyber security technology components and software to ensure that critical systems and information are resilient to cyber exploits and attacks. The researcher also performs attendant vulnerability assessments, analysis, and software engineering and design. The Cyber Security Software Engineer also develops hardware and software prototypes, and tests those prototypes in realistic environments.

Key Responsibilities

• Perform software development, software testing/debugging, software modification/enhancement, and software documentation


• Develop and maintain kernel and user-level software and scripts


• Contribute to technical reports and presentations


• Assist with performing software assurance scans with tools approved by stakeholders

Additional Responsibilities

• Assist in static and dynamic analysis of software/firmware components of embedded system


• Assist in development of software analysis tools to assist in the reverse engineering process, implementing methods to help in determining software functionality


• Assist in development and use of virtual and emulation environments for executing software under test


• Assist in data protocol analysis (network, RF, etc)


• Perform digital forensics on computer and embedded equipment


• Participate in designing and/or testing of embedded circuit boards

Required Minimum Qualifications

• Experience with firmware/software reverse engineering


• Experience with disassemblers such as Ghidra and IdaPro


• Experience with 1 or more programming languages (e.g. Python, C/C++, Rust)

Preferred Qualifications

• Active Secret Clearance


• Experience interacting with software test environments to include virtualized and emulative environments capable of executing the software under test (e.g. VMware, VirtualBox, QEMU, Unicorn)


• Experience developing plugins for disassemblers


• Experience with capture the flag events


• Experience with hardware reverse engineering


• Experience developing embedded systems


• Experience with PCB level communication buses (SPI, I2C, Etc)


• Experience with software defined radios


• Experience with debuggers


• Experience with dynamic/static analysis and fuzzing


• Strong written and verbal communication skills

Travel Requirements

<10% travel

Education and Length of Experience

This position vacancy is an open-rank announcement. The final job offer will be dependent on candidate qualifications in alignment with Research Faculty Extension Professional ranks as outlined in section 3.2.1 of the Georgia Tech Faculty Handbook

• 0 years of related experience with a Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or related engineering/scientific field

Please refer to our Research Faculty Technical Level Guidelines for minimum requirements at the higher levels.

U.S. Citizenship Requirements

Due to our research contracts with the U.S. federal government, candidates for this position must be U.S. Citizens.

Clearance Type Required

Candidates must be able to obtain and maintain an active security clearance.

Benefits at GTRI

Comprehensive information on currently offered GTRI benefits, including Health & Welfare, Retirement Plans, Tuition Reimbursement, Time Off, and Professional Development, can be found through this link: https://benefits.hr.gatech.edu/.

Equal Employment Opportunity

The Georgia Institute of Technology (Georgia Tech) is an Equal Employment Opportunity Employer. The Institute is committed to maintaining a fair and respectful environment for all. To that end, and in accordance with federal and state law, Board of Regents policy, and Institute policy, Georgia Tech provides equal opportunity to all faculty, staff, students, and all other members of the Georgia Tech community, including applicants for admission and/or employment, contractors, volunteers, and participants in institutional programs, activities, and services. Georgia Tech complies with all applicable laws and regulations governing equal opportunity in the workplace and in educational activities.

Equal opportunity and decisions based on merit are fundamental values of the University System of Georgia (\"USG\") and Georgia Tech. Georgia Tech prohibits discrimination, including discriminatory harassment, on the basis of an individual's race, ethnicity, ancestry, color, religion, sex (including pregnancy), national origin, age, disability, genetics, or veteran status in its programs, activities, employment, and admissions. Further, Georgia Tech prohibits citizenship status, immigration status, and national origin discrimination in hiring, firing, and recruitment, except where such restrictions are required in order to comply with law, regulation, executive order, or Attorney General directive, or where they are required by Federal, State, or local government contract.

USG Core Values Statement

The University System of Georgia is comprised of our 26 institutions of higher education and learning as well as the System Office. Our USG Statement of Core Values are Integrity, Excellence, Accountability, and Respect. These values serve as the foundation for all that we do as an organization, and each USG community member is responsible for demonstrating and upholding these standards. More details on the USG Statement of Core Values and Code of Conduct are available in USG Board Policy 8.2.18.1.2 and can be found on-line at https://www.usg.edu/policymanual/section8/C224/#p8.2.18_personnel_conduct.

Additionally, USG supports Freedom of Expression as stated in Board Policy 6.5 Freedom of Expression and Academic Freedom found on-line at https://www.usg.edu/policymanual/section6/C2653.