Junior Vulnerability Researcher

Battelle; Columbus (OH); Hybrid; USD 75,000 - 90,000; Full time

Benefits offered by this job

Flexible work schedule

Paid time off

Medical, dental, and vision coverage

401(k) with company contributions

Tuition assistance

Job summary

Battelle is looking for an aspiring Junior Vulnerability Researcher in Columbus, OH. This role involves conducting vulnerability research from scratch, collaborating with researchers, and using advanced tools. Candidates should possess a relevant Bachelor's or Master's degree and experience with disassemblers and debuggers.

The position allows for a hybrid work schedule, offering flexibility for personal commitments. Benefits include paid time off, medical coverage, retirement plans, and tuition assistance for further education.

Qualifications

• Bachelor’s in relevant field and 2 years of experience or a Master's degree.
• Must be a US Citizen willing to obtain a DoD Secret clearance.

Responsibilities

• Conduct vulnerability research and debugging of embedded devices.
• Collaborate with a close-knit team of researchers.

Skills

Disassembler experience (Ghidra, IDA Pro, BinaryNinja)

Assembly language knowledge (x86, x64, ARM, etc.)

Debugger experience (WinDbg, OllyDbg, gdb)

Knowledge of advanced exploitation techniques

C programming ability

Understanding of network protocols

Education

Bachelor's or Master's degree in Computer Science or related field

Tools

Fuzzing tools (AFL, Peach)

Microcontrollers

Job description

Job Summary

Battelle is currently seeking an aspiring Junior Vulnerability Researchers to work in our Columbus, OH or Chantilly, VA offices. Do you enjoy conducting vulnerability research from scratch? Do you have arguments over Ghidra vs. IDApro vs. BinaryNinja? Do you constantly switch between static analysis, dynamic analysis, and other automated methods? Do byte restrictions on shellcode make you want to solve the problem that much more? If you answered yes to these questions, this is the job for you! As a Junior Vulnerability Researchers, you will work with a team of vulnerability researchers that have the same passion as you. You will use and build vulnerability research tools that push past the edge of current tools and techniques. On any given day you will research and debug an embedded device while getting the chance to bounce ideas off a close-knit team of researchers. We have the tools and the mentors you will need to take yourself to the next level and who are eager to learn from your experience.

Key Qualifications

• Bachelor’s in Computer Science, Computer Engineering, Electrical Engineering, or related field of study and (2) years of experience, a Master’s degree in a relevant field, or an equivalent combination of education/experience in a relevant field
• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with one or more debuggers (WinDbg, OllyDbg, gdb)
• Experience with vulnerability research on one or more operating systems: Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or other custom operating systems
• Knowledge of advanced exploitation techniques (ret2libc, use-after-free, type confusion)
• Knowledge of exploit protection techniques (DEP, ASLR/NX)
• Ability to code in C
• Understanding of network protocols
• Must Be a US Citizen with the ability and willingness to obtain a DoD Secret or higher clearance

Preferred Qualifications

• Participation in CTFs
• Understanding of network protocols
• Experience with AI/ML
• Experience with microcontrollers
• Experience emulating embedded platforms for live debugging
• Experience using fuzzing tools such as AFL or Peach
• Concolic analysis research and implementation
• Experience with symbolic analysis
• Active DoD Secret security clearance

Benefits: Live an Extraordinary Life

• Balance life through a compressed work schedule: Most of our team follows a flexible, compressed work schedule that allows for every other Friday off—giving you a dedicated day to accomplish things in your personal life without using vacation time.
• Enjoy enhanced work flexibility, including a hybrid arrangement: You have options for where and when you work. Our Together with Flexibility model allows you to work 60% in-office and 40% remote, with Monday and Tuesday as common in-office days, dependent on team and position needs.
• Take time to recharge: You get paid time off to support work-life balance and keep motivated.
• Prioritize wellness: Stay healthy with medical, dental, and vision coverage with wellness incentives and benefits plus a variety of optional supplemental benefits.
• Better together: Coverage for partners, gender-affirming care and health support, and family formation support.
• Build your financial future: Build financial stability with an industry-leading 401(k) retirement savings plan. For most employees, we put in 5 percent whether you contribute or not, and match your contributions on top of that.
• Advance your education: Tuition assistance is available to pursue higher education.

A Work Environment Where You Succeed

For brilliant minds in science, technology, engineering and business operations, Battelle is the place to do the greatest good by solving humanity’s most pressing challenges and creating a safer, healthier and more secure world.

You will have the opportunity to thrive in a culture that inspires you to:

• Apply your talent to challenging and meaningful projects
• Receive select funding to pursue ideas in scientific and technological discovery
• Partner with world-class experts in a collaborative environment
• Nurture and develop the next generation of scientific leaders
• Give back to and improve our communities

Vaccinations & Safety Protocols

Battelle may require employees, based on job duties, work location, and/or its clients’ requirements to follow certain safety protocols and to be vaccinated against a variety of viruses, bacteria, and diseases as a condition of employment and continued employment and to provide documentation that they are fully vaccinated. If applicable, Battelle will provide reasonable accommodations based on a qualified disability or medical condition through the Americans with Disabilities Act or the Rehabilitation Act or for a sincerely held religious belief under Title VII of the Civil Rights Act of 1964 (and related state laws).

Battelle is an equal opportunity employer. We provide employment and opportunities for advancement, compensation, training, and growth according to individual merit, without regard to race, color, religion, sex (including pregnancy), national origin, sexual orientation, gender identity or expression, marital status, age, genetic information, disability, veteran-status veteran or military status, or any other characteristic protected under applicable Federal, state, or local law. Our goal is for each staff member to have the opportunity to grow to the limits of their abilities and to achieve personal and organizational objectives. We will support positive programs for equal treatment of all staff and full utilization of all qualified employees at all levels within Battelle.

The above statements are intended to describe the nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, activities and skills required of staff members. No statement herein is intended to imply any authorities to commit Battelle unless special written permission is granted by Battelle's Legal Department.

For more information about our other openings, please visit www.battelle.org/careers