Mid-level Vulnerability Researcher

Battelle Memorial Institute; Virginia (MN); Presencial; USD 127.000 - 181.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Tuition assistance

Mentorship culture

Autonomy in research projects

Descripción de la vacante

Battelle Memorial Institute is seeking a Mid-level Vulnerability Researcher to explore how embedded devices operate, break them down, and build automated tools. You will work with disassemblers, debuggers, and a close-knit team to push the edge of current techniques.

Based in Columbus, OH or Chantilly, VA, you’ll join an elite team with access to mentoring and extensive IRAD opportunities. A strong background in assembly, debugging, and C/Python is expected.

Formación

• Bachelor's degree in related field with relevant experience or higher degrees
• Strong understanding of reading assembly language and using debugging tools
• Experience with disassemblers used for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with x86/x64/ARM/MIPS/PowerPC assembly languages
• Experience with debuggers (WinDbg, OllyDbg, gdb)
• Experience with multiple OS environments (Android, iOS, Windows, Linux, MacOS, RTOS)
• Knowledge of exploitation techniques (ret2libc, use-after-free, type confusion)
• Knowledge of DEP/ASLR/NX security protections
• Proficiency in C and/or Python
• Ability to work in small fast-paced teams and learn continually

Responsabilidades

• Research and debug embedded devices using disassemblers and debuggers
• Develop automated, scalable vulnerability research tools and pipelines
• Collaborate with a multidisciplinary team to advance embedded security solutions
• Contribute to projects from silicon to systems with mentors and peers

Conocimientos

Reading assembly language

Debugging tools

Ghidra/IDA/BinaryNinja

C and Python programming

Embedded systems knowledge

Educación

Bachelor's degree in related field, 5+ years experience

Master's or PhD in related field

Herramientas

Ghidra

IDA Pro

BinaryNinja

Descripción del empleo

Battelle delivers when others can't. We conduct research and development, manage national laboratories, design and manufacture products and deliver critical services for our clients-whether they are a multi-national corporation, a small start-up or a government agency.

We recognize and appreciate the value and contributions of individuals from a wide range of backgrounds and experiences and welcome all qualified individuals to apply.

Job Summary

Do you have a passion for understanding how things work, and ultimately, how they break? Do you enjoy working with discovering vulnerabilities and debugging programs with tools like gdb or QIRA? Does creating automated, scalable and reverse engineering tools and pipelines excite you? If you answered yes to these questions, this is the job for you! Battelle is currently seeking an aspiring Mid-level Vulnerability Researcher to work in our Columbus, OH or Chantilly, VA locations. As a Mid-level Vulnerability Researcher, you will work with disassemblers and debuggers to quickly understand how embedded devices operate. You will use and build tools that push past the edge of current tools and techniques. In a given day you will research and debug an embedded device while getting the chance to bounce ideas off of a close-knit team of researchers. We have the tools and the mentors you will need to take yourself to the next level and who are eager to learn from your experience. "From Silicon to Systems" - We are an elite, multi-disciplinary team, bringing together the brightest minds from physics, computer science, electrical engineering, and mathematics to develop unique embedded security solutions for government and industrial customers. Battelle has been trusted by elite government clients to solve some of the world's hardest security problems. We work in small agile teams to push the bounds of computing technology. Our high-powered labs include specialized software and hardware, so our engineers have everything they need to invent new Cyber solutions. We encourage new ideas with our large Internal Research and Development (IRAD) program where engineers work on projects they are passionate about. Inventors and innovators are rewarded by our industry-leading IP compensation program. Our group works collaboratively with many parts of Battelle's larger organization on projects ranging from genomics to robotics.

Key Qualifications

• Bachelor's degree in related field with 5 years of experience; or Master's degree in related field with 2 years of experience; or PhD in related field; or an equivalent combination of education and/or experience in a related field
• Strong understanding in reading assembly language and using debugging tools
• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with one or more debuggers (WinDbg, OllyDbg, gdb)
• Experience with vulnerability research on one or more operating systems: Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or other custom operating systems
• Knowledge of advanced exploitation techniques (ret2libc,use-after-free,type confusion)
• Knowledge of exploit protection techniques (DEP, ASLR/NX)
• Ability to code in C and/or Python
• Ability to work individually and in small fast paced team environments
• Passion and drive to constantly need to improve your skill set
• Must Be a US Citizen with the ability and willingness to obtain a DoD Secret or higher clearance

Preferred Qualifications

• Understanding of network protocols
• Experience with AI/ML
• Experience with microcontrollers
• Experience emulating embedded platforms for live debuggingExperience using fuzzing tools such as AFL or Peach
• Concolic analysis research and implementation
• Experience with symbolic analysis
• Active DoD Secret security clearance

Annual salary compensation range:

Battelle is committed to fair and equitable compensation practices. The salary range for this role is $110,000 - $140,000 (Ohio) and $126,700 - $180,500 (Virginia) per year, in addition to our comprehensive benefits package. A candidate's salary is determined by various factors, including but not limited to education, relevant work experience, skills, and certifications. Salary ranges may vary based on geographic location and market conditions.

Some Of The Extras That Make Working Here Great

• Learn (tuition assistance, paid training) and teach (get published, speak at a conference)
• Software and Intellectual Property development royalty sharing
• Mentorship and learning culture
• Internally funded and guided research projects with large amounts of individual autonomy

Benefits: Live an Extraordinary Life

We care about your well-being, not just on the job. Battelle offers comprehensive and competitive benefits to help you live your best life.

• Balance life through a compressed