Reverse Engineer

TekStream Solutions; Columbus (OH); On-site; USD 110,000 - 160,000; Full time

Job summary

TekStream Solutions is seeking an aspiring Vulnerability Researcher/Reverse Engineer to join our client in Columbus, OH. You will work with disassemblers and debuggers to understand how embedded devices operate, and you will help push past current tools and techniques.

You will collaborate with a close-knit team of researchers, leverage mentors, and contribute to research and debugging on embedded platforms.

Qualifications

• Bachelor’s degree in CS/CE/EE or related field with required experience
• Experience developing software to run in user-mode or kernel-mode
• Strong understanding reading assembly and using debugging tools
• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with debuggers (WinDbg, OllyDbg, gdb)
• Experience with vulnerability research on various OS (Android, iOS, Windows, Linux, MacOS, etc.)
• Knowledge of advanced exploitation techniques (ret2libc,use-after‑free,type confusion)
• Knowledge of exploit protection techniques (DEP, ASLR/NX)
• Ability to code in C
• Understanding of network protocols
• Ability to work individually and in small fast paced teams
• Passion and drive to constantly improve skills
• US Citizenship and ability to obtain Secret or higher clearance

Skills

C programming

Assembly language

Disassembler tools

Ghidra

IDA Pro

BinaryNinja

WinDbg

GDB

OllyDbg

Vulnerability research

Networking fundamentals

Education

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related field

Master’s degree in related field (with 5 years experience)

PhD in related field (with 2 years experience)

Tools

Ghidra

IDA Pro

BinaryNinja

Job description

Our client is currently seeking an aspiring Vulnerability Researcher/Reverse Engineer to work in their Columbus, OH location.

As a Vulnerability Researcher, you will work with disassemblers and debuggers to quickly understand how embedded devices operate. You will use and build tools that push past the edge of current tools and techniques. In a given day you will research and debug an embedded device while getting the chance to bounce ideas off of a close-knit team of researchers. We have the tools and the mentors you will need to take yourself to the next level and who are eager to learn from your experience.

Key Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related field of study with 8 years of experience; Master’s degree in related field with 5 years of experience; PhD in a related field with 2 years of experience; or an equivalent combination of education and experience
• Develop software to run in user-mode or kernel-mode
• Strong understanding in reading assembly language and using debugging tools
• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with one or more debuggers (WinDbg, OllyDbg, gdb)
• Experience with vulnerability research on one or more operating systems: Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or other custom operating systems
• Knowledge of advanced exploitation techniques (ret2libc,use-after‑free,type confusion)
• Knowledge of exploit protection techniques (DEP, ASLR/NX)
• Ability to code in C
• Understanding of network protocols
• Ability to work individually and in small fast paced team environments
• Passion and drive to constantly need to improve your skill set
• Must Be a US Citizen with the ability and willingness to obtain a Secret or higher clearance

Preferred Qualifications

• Experience using fuzzing tools such as AFL or Peach
• Concolic analysis research and implementation
• Experience emulating embedded platforms for live debugging
• Experience with microcontrollers
• Experience with symbolic analysis
• Active Secret security clearance or ability to obtain one