Malware Reverse Engineer & Threat Researcher

Carnegie Mellon University; Pittsburgh (Allegheny County); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

8% retirement contribution

Tuition benefits for you and depend/or

Flexible work arrangements

Paid parental and military leave

Transit benefits

Job summary

Carnegie Mellon University’s CERT Division seeks a Reverse Engineer Researcher for the Threat Analysis directorate. The role focuses on reverse engineering malicious code, developing new analysis tools, and addressing emerging threats while collaborating with the broader security community.

The candidate should have a strong background in software reverse engineering, malware analysis, and proficiency in C/C++, with ability to communicate complex findings clearly. Moderate travel may be required.

Qualifications

• BS in Computer Science or related with 3+ years experience or MS with 1+ year.
• Experience in malware analysis and reverse engineering of software binaries.
• Strong analytical mindset and curiosity about how software works.
• Ability to balance rapid prototyping with maintainable tool development.
• Strong technical writing and communication skills.

Responsibilities

• Reverse engineer malicious code to support high-impact customers and develop new analysis methods/tools.
• Perform in-depth reverse engineering and document results in reports and presentations.
• Explore applying AI to support reverse engineering and malware analysis.
• Design, prototype, and transition new analysis methods and tools.
• Identify and document emerging and complex active security threats.
• Participate in the security community through collaboration, papers, and presentations.

Skills

Reverse engineering

Malware analysis

Analytical mindset

Technical writing

Communication

Education

BS in Computer Science or related

MS in Computer Science or related

Tools

IDA Pro

Ghidra

BinaryNinja

x32/x64_dbg

WinDbg

Frida

QEMU

Unicorn Engine

Job description

Carnegie Mellon University’s CERT Division seeks a Reverse Engineer Researcher for the Threat Analysis directorate. The role focuses on reverse engineering malicious code, developing new analysis tools, and addressing emerging threats while collaborating with the broader security community.

The candidate should have a strong background in software reverse engineering, malware analysis, and proficiency in C/C++, with ability to communicate complex findings clearly. Moderate travel may be required.