Security Product Reverse Engineer (TS/SCI w POLY)

Stech Technology UK Limited; McLean (VA); On-site; USD 130,000 - 180,000; Full time

Job summary

Stech Technology UK Limited is seeking a Security Product Reverse Engineer to analyze and audit security products, focusing on vulnerability research and code exploitation. You will gain hands-on experience with security appliances and embedded systems to enhance product security and development.

Ideal candidates have a BS in CS/Engineering and 3+ years in software development, plus strong C/C++ and Python, and familiarity with IDA Pro or Ghidra. A security clearance is required or obtainable.

Qualifications

• Bachelor's degree or equivalent in Computer Science, Engineering, or related field.
• 3+ years of professional software development experience including design, implementation, testing, analysis, and debugging.
• Experience using software configuration management tools (e.g., Git).
• Experience with OS internals in BSD/Linux/Unix, Windows, Mac OS, Android, or RIS C.
• At least 3 years of experience in C, C++, and Python.
• Experience using IDA Pro or Ghidra.
• Experience in source code analysis and code auditing.
• Hands-on vulnerability research in Windows, Linux, or macOS.
• 5+ years of CNE development/testing against security products or embedded OS security.
• Ability to obtain and maintain necessary security clearances.

Responsibilities

• Analyze and audit security products and contribute to vulnerability assessment.
• Perform vulnerability research and code exploitation activities.
• Work hands-on with security appliances and embedded systems to improve product security.
• Collaborate with development teams to strengthen security across platforms.

Skills

C/C++

Python

Software debugging

Vulnerability research

Code auditing

Education

Bachelor's degree in CS/Engineering

Tools

Git

IDA Pro

Ghidra

Job description

TS/SCI w POLY Required

About the Role:

Join our team as a Security Product Reverse Engineer to analyze and audit security products, focusing on vulnerability research and code exploitation. This role involves hands‑on work with security appliances and embedded systems to enhance product security and development.

Required Qualifications:

• Bachelor's degree or equivalent experience in Computer Science, Engineering, or a related field.
• At least 3 years of professional software development experience, including design, implementation, testing, analysis, and debugging.
• Demonstrated experience using software configuration management tools (e.g., Git).
• Software systems development experience and understanding of OS internals in at least one of: BSD/Linux/Unix, Windows, Mac OS, Android, or RISC assembly.
• At least 3 years of experience developing, testing, and debugging in C, C++, and Python.
• At least 3 years of demonstrated experience using IDA Pro/Ghidra.
• At least 3 years of demonstrated experience in both source code analysis and code auditing.
• At least 3 years of hands‑on experience conducting Vulnerability Research (VR) in one of: Windows internals, Linux kernel, or Mac OS X.
• At least 5 years of hands‑on experience with Computer Network Exploitation (CNE) development and testing against at least one of: Personal Security Products, Security Appliances, or Embedded OS security.
• Ability to obtain and maintain necessary security clearances.

Desired Qualifications:

• Ability to reverse engineer (RE) code.
• Experience working independently and in teams in a fast‑paced environment with changing priorities.
• Undergraduate or graduate degree or certifications in a relevant technical field.
• Demonstrated experience utilizing a diversity of development languages.
• In‑depth understanding and/or implementation of CNE techniques and methodologies, including application and mitigation for BSD/Linux/Unix, Windows, Mac OS, Android, or RISC assembly.
• Experience applying continuous integration and automated testing tools to software development practices.
• Experience with firewalls, standard operating systems features, and PSPs.
• At least 3 years of experience developing and testing applications on Windows, Mac, Linux, Mobile, or Embedded platforms.

TS/SCI w POLY Required