MidLevel Vulnerability Researcher

Zetier; State College (Centre County); On-site; USD 80,000 - 100,000; Full time

Job summary

A prominent cybersecurity firm in State College is seeking a Mid-Level Vulnerability Researcher to analyze malicious software and develop critical cyber capabilities. Ideal candidates must have strong skills in reverse engineering and scripting languages like Python, as well as the ability to obtain a U.S. security clearance. This role offers an opportunity to engage in cutting-edge cybersecurity efforts and collaborate with a diverse team committed to excellence.

Qualifications

• Experience with reverse engineering compiled programs and command/control techniques.
• Ability to obtain and maintain a U.S. security clearance.

Responsibilities

• Analyze and counter malicious software.
• Develop operationally critical cyber capabilities.

Skills

Reverse engineering compiled programs (C/C++), 10

Reading assembly languages (x86, x86-64, ARM)

Scripting languages (Python)

Debuggers and decompilers (gdb, Binja, IDA Pro)

U.S. security clearance

Tools

Binja

IDA Pro

Job description

Mid-Level Vulnerability Researcher

Zetier is seeking Mid-Level Vulnerability Researchers to analyze and counter malicious software and develop operationally critical cyber capabilities. Candidates will demonstrate practical experience designing, developing, and deploying tools intersecting command and control, persistence, and networking.

Required

• Experience with reverse engineering compiled programs (C/C++)
• Experience reading common assembly languages (x86, x86-64, ARM)
• Experience developing in scripting languages (Python)
• Experience with debuggers and decompilers (gdb, Binja, IDA Pro)
• Ability to obtain and maintain a U.S. security clearance

Desired

• Experience developing/defeating mitigations (ASLR, DEP, N^X)
• Developed defeats of common anti-RE techniques (obfuscation)
• Detailed understanding of embedded platforms (FPGA, physical memory)
• Securely implemented cryptographic primitives (AES-GCM, SHA256, ECDSA)
• Experience with program analysis tools and techniques (control flow, program slicing, taint tracing)
• Effective use of automated analysis (fuzzers, emulation, sandbox)
• Deep knowledge of file systems and formats (ELF, PE, Mach-O)
• Effective communication with customers and teammates
• Experience developing proof-of-concept exploits
• Active U.S. security clearance

Zetier is proud to be an Equal Opportunity Employer. We celebrate diversity and do not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis protected by law. All employment is decided on the basis of merit, qualifications, and business need.