Reverse Engineer Researcher

Carnegie-Mellon-University; Pittsburgh (Allegheny County); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Retirement plan

Tuition benefits

Flexible work

Parental leave

Military leave

Mindfulness program

Transit benefits

Relocation assistance

Professional development

Job summary

The Software Engineering Institute (SEI) at Carnegie Mellon University seeks a Reverse Engineer Researcher for the Threat Analysis directorate. You will reverse engineer malicious code for high-impact customers, design new analysis methods, and address emerging threats while contributing to the security community.

You will prototype tools, document results in reports and talks, explore AI-assisted reverse engineering, and share findings.

Qualifications

• Reverse engineer malware for high-impact customers with advanced methods.
• Document methods and results in reports and talks.
• Strong writing and analytical skills required.

Responsibilities

• Reverse engineer malicious code and develop new analysis tools.
• Identify and address emerging and complex security threats.
• Contribute to the broader security community via papers and presentations.
• Prototype and transition new analysis methods and tools.
• Collaborate across teams to share findings and improve defenses.
• Travel to sponsor sites and conferences as needed (approx. 15%).

Skills

Reverse engineering

Static analysis

Debuggers

C/C++

Java

Python

Go

OS internals

Malware analysis

AI for RE

Education

BS in CS or related

MS in CS or related

PhD in CS or related

Tools

IDA Pro

Ghidra

Binary Ninja

x32dbg

x64dbg

gdb

WinDbg

Job description

A bout the roleThe SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Our core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time.The CERT Division of the Software Engineering Institute (SEI) is seeking an applicant for the role of a Reverse Engineer Researcher for the Threat Analysis directorate. The SEI is a federally funded research and development center at Carnegie Mellon University. What you’ll doReverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, work to identify and address emerging and complex threats, and effectively participate in the broader security communityPerform in-depth reverse engineering of malicious code, document and transition results in reports, presentations, and technical exchangesExplore ways to use artificial intelligence to support of reverse engineering and apply reverse engineering practices to artificial intelligence systemsDesign, prototype, and transition new analysis methods and toolsIdentify and document emerging and complex active security threatsParticipate in the broader security community through collaboration, papers, and presentationsWho you areYou have BS in Computer Science or related discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR PhD in the same fields with two (2) years of experience.You enjoy working on emerging and complex malware analysis and reverse engineering problems .You have an analytical mindset and deep curiosity about how software works .You have the a bility to balance rapid prototyping with maintainable tool development .You have strong technical writing experience .You recognize and deal appropriately with confidential and sensitive information .You are able to handle continual shifting priorit ies .You enjoy mentoring and training others as well as sharing knowledge .You communicate effectively with technical and non-technical audiences .You have a willingness to travel to various locations to support the SEI’s overall mission This includes sponsor sites, conferences, and offsite meetings on occasion. Moderate Travel (15%)You will be subject to a background check and obtain and maintain an active Department of War security clearanceYou have experience with or knowledge ofReverse engineering software binaries for a variety of architectures , both at the user level and kernel levelStatic analysis tools ( e.g. IDA Pro, NSA Ghidra , Binary Ninja )U ser-level and kernel-level debuggers ( e.g. x32dbg, x64dbg, gdb , WinDbg )N ative programming languages ( e.g. C/C++).High-level programming languages ( e.g. Java, Python, GoLang , etc.)Software engineering and design conceptsFirmware and d evice driver developmentM alware tradecraft and threat actor tactics, techniques, and procedures (TTPs)M alware signature creation and use, independent of detection technologyOperating system concepts and internals and binary file formats ( e.g. PE, ELF, Mach-O, etc.)Internet Protocols and network analysis tools ( e.g. Wireshark, netcat , etc. )C ompiler theory, cryptography, and malware deobfuscation techniques.Mobile device development and reverse engineeringM alware sandbox es or instrumentation frameworks (e.g., Frida, QEMU, Unicorn Engine).General understanding and experience in artificial intelligence and m achine l earning and using artificial intelligence to support reverse engineering and malware analysisWhy work here?Join a world-class organization that has significant impact on softwareWork with cutting edge technologies and experts to solve tough problems for the government and the nationGet 8% monthly contribution for your retirement, without having to contribute yourselfGet tuition benefits to CMU and other institutions for you and your dependent childrenEnjoy a healthy work/life balance with flexible work arrangements and paid parental and military leaveGet access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit SystemEnjoy annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societiesQualify for relocation assistance and so much moreLocationArlington, VA, Pittsburgh, PAJob FunctionSoftware/Applications Development/EngineeringPosition TypeStaff – RegularFull time/Part timeFull timePay BasisSalary