Hybrid Embedded Vulnerability Researcher

Battelle Memorial Institute; Chantilly (VA); Hybrid; USD 127,000 - 181,000; Full time

Benefits offered by this job

Tuition assistance

401(k) retirement savings with company

Paid time off

Hybrid work arrangement

Job summary

Battelle Memorial Institute in Chantilly, VA (and Columbus, OH) seeks a Mid-level Vulnerability Researcher to work with disassemblers and debuggers to understand how embedded devices operate and to develop new automated tools for vulnerability research. You will join a close-knit team of researchers, push the boundaries of current tooling, and contribute to elite government and industrial cyber solutions.

A DoD clearance willingness and US citizenship are required, with a hybrid work model

Qualifications

• Bachelor’s degree with 5+ years, or Master’s with 2+ years, or PhD; or equivalent combination.
• Strong understanding in reading assembly language and using debugging tools
• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with one or more debuggers (WinDbg, OllyDbg, gdb)
• Experience with vulnerability research on multiple operating systems (Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or others)
• Knowledge of advanced exploitation techniques (ret2libc, use-after-free, type confusion)
• Knowledge of exploit protection techniques (DEP, ASLR/NX)
• Ability to code in C and/or Python
• Ability to work individually and in small fast paced team environments
• Passion to continuously improve skills
• US Citizenship with ability/willingness to obtain DoD Secret or higher clearance

Responsibilities

• Work with disassemblers and debuggers to understand embedded devices.
• Develop tools to push beyond current capabilities for vulnerability research.
• Research and debug embedded devices as part of a close-knit research team.
• Contribute to embedded security solutions for government and industry.

Skills

Assembly language

Debugging

Vulnerability research

C/Python coding

OS knowledge

Exploitation techniques

Exploit protection (DEP/ASLR)

Independent work in small teams

Education

Bachelor’s degree in related field

Master’s degree in related field

PhD in related field

Tools

Ghidra

IDA Pro

BinaryNinja

WinDbg

gdb

Job description

Battelle Memorial Institute in Chantilly, VA (and Columbus, OH) seeks a Mid-level Vulnerability Researcher to work with disassemblers and debuggers to understand how embedded devices operate and to develop new automated tools for vulnerability research. You will join a close-knit team of researchers, push the boundaries of current tooling, and contribute to elite government and industrial cyber solutions.

A DoD clearance willingness and US citizenship are required, with a hybrid work model