Mid-level Vulnerability Researcher

Battelle Memorial Institute; Columbus (OH); Vor Ort; USD 110.000 - 140.000; Vollzeit

Benefits dieser Stelle

Learn (tuition assistance, paid培训) and

Software and Intellectual Property IPs

Mentorship and learning culture

Autonomy in research projects

Zusammenfassung

Battelle Memorial Institute in Columbus, OH is seeking a Mid-level Vulnerability Researcher to join a focused team working on embedded security challenges. You will use disassemblers and debuggers to understand device behavior and help build automated tooling to push the boundaries of current techniques.

You will collaborate with a multidisciplinary group, have access to mentors, and contribute to projects spanning government and industrial clients.

Qualifikationen

• Bachelor’s degree in a related field with 5+ years of experience, or Master’s degree with 2+ years, or PhD in related field.
• Strong understanding of reading assembly language and using debugging tools.
• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja).
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC).
• Experience with one or more debuggers (WinDbg, OllyDbg, gdb).
• Experience with vulnerability research on multiple operating systems (Android, iOS, Windows, Linux, MacOS, RTOSs).
• Knowledge of advanced exploitation techniques (ret2libc, use-after-free, type confusion).
• Knowledge of exploit protection techniques (DEP, ASLR/NX).
• Ability to code in C and/or Python.
• Ability to work individually and in small fast-paced teams.
• Passion to continuously improve skills.
• Must be a US Citizen with ability to obtain a DoD Secret or higher clearance.

Aufgaben

• Work with disassemblers and debuggers to understand embedded devices.
• Build tools that push past current tools and techniques.
• Research and debug an embedded device with a close-knit team of researchers.
• Join an elite multi-disciplinary team to develop embedded security solutions for government and industry.

Kenntnisse

Assembly language reading

Disassembler tools

Assembly languages

Debuggers

OS vulnerabilities

Exploitation techniques

Exploit protections

C/Python

Teamwork

Continuous learning

Security clearance

Ausbildung

Bachelor’s degree in related field

Master’s degree in related field

PhD in related field

Equivalent education/experience

Tools

Ghidra/IDA/BinaryNinja

WinDbg/OllyDbg/gdb

Jobbeschreibung

Battelle delivers when others can’t. We conduct research and development, manage national laboratories, design and manufacture products and deliver critical services for our clients—whether they are a multi-national corporation, a small start-up or a government agency.

We recognize and appreciate the value and contributions of individuals from a wide range of backgrounds and experiences and welcome all qualified individuals to apply.

Job Summary

Do you have a passion for understanding how things work, and ultimately, how they break? Do you enjoy working with discovering vulnerabilities and debugging programs with tools like gdb or QIRA? Does creating automated, scalable and reverse engineering tools and pipelines excite you? If you answered yes to these questions, this is the job for you!

Battelle is currently seeking an aspiring Mid-level Vulnerability Researcher to work in our Columbus, OH or Chantilly, VA locations.

As a Mid-level Vulnerability Researcher, you will work with disassemblers and debuggers to quickly understand how embedded devices operate. You will use and build tools that push past the edge of current tools and techniques. In a given day you will research and debug an embedded device while getting the chance to bounce ideas off of a close-knit team of researchers. We have the tools and the mentors you will need to take yourself to the next level and who are eager to learn from your experience.

“From Silicon to Systems” - We are an elite, multi-disciplinary team, bringing together the brightest minds from physics, computer science, electrical engineering, and mathematics to develop unique embedded security solutions for government and industrial customers.

Battelle has been trusted by elite government clients to solve some of the world’s hardest security problems. We work in small agile teams to push the bounds of computing technology. Our high-powered labs include specialized software and hardware, so our engineers have everything they need to invent new Cyber solutions.

We encourage new ideas with our large Internal Research and Development (IRAD) program where engineers work on projects they are passionate about. Inventors and innovators are rewarded by our industry-leading IP compensation program. Our group works collaboratively with many parts of Battelle’s larger organization on projects ranging from genomics to robotics.

Key Qualifications

• Bachelor’s degree in related field with 5 years of experience; or Master’s degree in related field with 2 years of experience; or PhD in related field; or an equivalent combination of education and/or experience in a related field

• Strong understanding in reading assembly language and using debugging tools

• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja)

• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)

• Experience with one or more debuggers (WinDbg, OllyDbg, gdb)

• Experience with vulnerability research on one or more operating systems: Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or other custom operating systems

• Knowledge of advanced exploitation techniques (ret2libc,use-after-free,type confusion)

• Knowledge of exploit protection techniques (DEP, ASLR/NX)

• Ability to code in C and/or Python

• Ability to work individually and in small fast paced team environments

• Passion and drive to constantly need to improve your skill set

• Must Be a US Citizen with the ability and willingness to obtain a DoD Secret or higher clearance

Preferred Qualifications

• Understanding of network protocols

• Experience with AI/ML

• Experience with microcontrollers

• Experience emulating embedded platforms for live debugging

• Experience using fuzzing tools such as AFL or Peach

• Concolic analysis research and implementation

• Experience with symbolic analysis

• Active DoD Secret security clearance

Annual salary compensation range:

Battelle is committed to fair and equitable compensation practices. The salary range for this role is $110,000 - $140,000 (Ohio) and $126,700 - $180,500 (Virginia) per year, in addition to our comprehensive benefits package. A candidate’s salary is determined by various factors, including but not limited to education, relevant work experience, skills, and certifications. Salary ranges may vary based on geographic location and market conditions.

Some Of The Extras That Make Working Here Great

• Learn (tuition assistance, paid training) and teach (get published, speak at a conference)

• Software and Intellectual Property development royalty sharing

• Mentorship and learning culture

• Internally funded and guided research projects with large amounts of individual autonomy

Benefits: Live an Extraordinary Life

We care about your well-being, not just on the job. Battelle offers comprehensive and competitive benefits to help you live your best life.

• Balance life through a compressed work schedule : Most of our team follows a flexible, compressed work schedule that allows for every other Friday off—giving you a dedicated day to accomplish things in your personal life without using vacation time.

• Enjoy enhanced work flexibility, including a hybrid arrangement: You have options for where and when you work. Our Together with Flexibility model allows you to work 60% in‑office and 40% remote, with Monday and Tuesday as common in‑office days, dependent on team and position needs.

• Take time to recharge : You get paid time off to support work-life balance and keep motivated.

• Prioritize wellness : Stay healthy with medical, dental, and vision coverage with wellness incentives and benefits plus a variety of optional supplemental benefits.

• Better together : Coverage for partners, gender‑affirming care and health support, and family formation support.

• Build your financial future : Build financial stability with an industry‑leading 401(k) retirement savings plan. For most employees, we put in 5 percent whether you contribute or not, and match your contributions on top of that.

• Advance your education : Tuition assistance is available to pursue higher education.

A Work Environment Where You Succeed

For brilliant minds in science, technology, engineering and business operations, Battelle is the place to do the greatest good by solving humanity’s most pressing challenges and creating a safer, healthier and more secure world.

You will have the opportunity to thrive in a culture that inspires you to:

• Apply your talent to challenging and meaningful projects

• Receive select funding to pursue ideas in scientific and technological discovery

• Partner with world‑class experts in a collaborative environment

• Nurture and develop the next generation of scientific leaders

• Give back to and improve our communities

Vaccinations & Safety Protocols

Battelle may require employees, based on job duties, work location, and/or its clients’ requirements to follow certain safety protocols and to be vaccinated against a variety of viruses, bacteria, and diseases as a condition of employment and continued employment and to provide documentation that they are fully vaccinated. If applicable, Battelle will provide reasonable accommodations based on a qualified disability or medical condition through the Americans with Disabilities Act or the Rehabilitation Act or for a sincerely held religious belief under Title VII of the Civil Rights Act of 1964 (and related state laws).

Battelle is an equal opportunity employer. We provide employment and opportunities for advancement, compensation, training, and growth according to individual merit, without regard to race, color, religion, sex (including pregnancy), national origin, sexual orientation, gender identity or expression, marital status, age, genetic information, disability, veteran‑status veteran or military status, or any other characteristic protected under applicable Federal, state, or local law. Our goal is for each staff member to have the opportunity to grow to the limits of their abilities and to achieve personal and organizational objectives. We will support positive programs for equal treatment of all staff and full utilization of all qualified employees at all levels within Battelle.

The above statements are intended to describe the nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, activities and skills required of staff members. No statement herein is intended to imply any authorities to commit Battelle unless special written permission is granted by Battelle's Legal Department.