Lead Vulnerability Researcher - Hardware & Software Security

Erias Ventures; Maryland; On-site; USD 150,000 - 260,000; Full time

Benefits offered by this job

Above Market Pay

401k with immediate vesting

Bonuses for business development

Professional development

Job summary

Erias Ventures seeks a Vulnerability Researcher to perform engineering and vulnerability research across hardware, software, and operating systems. You will determine functionality, code structure, and system design to discover initial access capabilities.

You will debug, analyze code, and develop exploits while presenting findings and leading reverse engineering efforts. A Top-Secret/SCI clearance is required, and sponsorship is not available.

Qualifications

• Minimum two years' experience programming in Assembly, C, C#, C++, Perl, or Python
• Experience in hardware or software reverse engineering using tools like IDA Pro, Ghidra & Binary Ninja
• 0-day vulnerabilities or CVEs discovered and attributed to themselves
• History performing vulnerability research
• Experience with fuzzers – AFL, LibFuzzer, ClusterFuzz, oss-fuzz
• Experience with code analysis tools – CodeQL, Joern, Semgrep
• History of exploiting 0-day vulnerabilities and CVEs
• History of reverse engineering malware or code for CNE purposes
• Experience with reverse engineering tools – Ghidra, Ida Pro, Binary Ninja
• Experience using debuggers – GDB or WinDbg
• Experience building C/C++ code
• Experience with VsCode/Visual Studio
• Familiarity with ARM or MIPS architectures and Linux variants
• Python usage in tooling

Responsibilities

• Actively debug software and troubleshoot issues
• Perform source code analysis to identify flaws and document impact/severity
• Develop proof-of-concept exploits for research targets
• Prepare technical presentations on projects
• Lead reverse engineering and vulnerability research on hardware, software, and OS to identify initial access capabilities

Skills

Assembly programming

C programming

C++ programming

Python scripting

Reverse engineering

Debugging

Fuzzing

Code analysis

Ghidra

IDA Pro

Binary Ninja

GDB

WinDbg

VSCode/Visual Studio

Education

Bachelor's Degree in Computer Science or related field

Tools

Ghidra

IDA Pro

Binary Ninja

Ghidra

WinDbg

GDB

Job description

Erias Ventures seeks a Vulnerability Researcher to perform engineering and vulnerability research across hardware, software, and operating systems. You will determine functionality, code structure, and system design to discover initial access capabilities.

You will debug, analyze code, and develop exploits while presenting findings and leading reverse engineering efforts. A Top-Secret/SCI clearance is required, and sponsorship is not available.