Senior Cyber Software Engineer

STR; Woburn (MA); On-site; USD 138,000 - 190,000; Full time

Job summary

STR's Defensive Cyber Technologies (DCT) group is seeking a Senior Cyber Software Engineer to develop software and capabilities that strengthen the security of national defense systems. You will harden customer codebases, run security assessments, and build first-of-its-kind tools to identify vulnerabilities before they affect missions.

You will work on a collaborative team tackling fuzzing campaigns, static and dynamic analysis, and communicating findings to engineers and stakeholders.

Qualifications

• Bachelor's degree in Computer Science or related field.
• MS in CS or related field may be considered.
• Minimum 5 years of relevant professional experience (MS +3 or PhD may be considered).

Responsibilities

• Develop robust software for national security missions.
• Perform security assessments on operational software and systems.
• Identify, validate, and remediate vulnerabilities.
• Design and execute fuzzing campaigns to uncover weaknesses.
• Develop static and dynamic analysis tools to detect vulnerabilities.
• Communicate findings and remediation recommendations to stakeholders.

Skills

C/C++

OS internals

Assembly-level debugging

GCC/LLVM

CMake

Education

Bachelor's degree in Computer Science or related field

MS in Computer Science or related field

Tools

LLVM/Clang

GCC

CMake

PIN

DynamoRIO

AFL++

Rust

Docker

QEMU

Ghidra

IDA Pro

Binary Ninja

objdump

Job description

The Defensive Cyber Technologies (DCT) group at STR is seeking a Senior Cyber Software Engineer to develop software and technical capabilities that improve the security and resiliency of critical national defense systems. Our team hardens customer codebases, conducts cybersecurity assessments of operational software, and develops and applies first-of-its-kind cybersecurity tools to identify and remediate vulnerabilities before they affect mission-critical systems.

What you'll do:

• Work as part of a high-functioning team to apply advanced software engineering principles to develop robust, resilient software solutions for national security missions
• Perform comprehensive security assessments on operational software and mission-critical systems
• Identify, validate, and remediate vulnerabilities
• Design, build, and execute novel fuzzing campaigns to uncover security weaknesses
• Develop static and dynamic analysis tools to detect, report, and remediate vulnerabilities in software systems
• Communicate technical findings, risk, and remediation recommendations to engineering and customer stakeholders

Who you are:

• This position requires an Active Secret or Top Secret security clearance, for which US citizenship is needed by the US Government.
• Bachelors degree in Computer Science, or related field with a minimum 5 years of relevant professional experience (MS plus 3 years experience or PhD may be considered)
• Strong proficiency in C or C++ and the ability to learn and work effectively in additional languages as needed
• Strong systems programming foundation, including familiarity with OS internals, ABI/calling conventions, memory and process management, and assembly-level debugging
• Experience working with compiler and build toolchains such as LLVM/Clang, GCC, and CMake.

Nice to have:

• Experience with dynamic analysis and fuzzing tools, such as PIN, DynamoRio, and AFL++
• Proficiency in Rust
• Experience with container and virtualization technologies, such as Docker and QEMU
• Familiarity with reverse engineering and binary analysis using tools such as Ghidra, IDA Pro, Binary Ninja, or objdump

Pay Information
Full-Time Salary Range: $138,000 - $190,000

STR is a growing technology company with locations near Boston, MA, Arlington, VA, near Dayton, OH, Melbourne, FL, Carlsbad, CA, Atlanta, GA, and Denver, CO. We specialize in advanced research and development for defense, intelligence, and national security in: cyber; next-generation sensors, radar, sonar, communications, and electronic warfare; and artificial intelligence algorithms and analytics to make sense of the complexity that is exploding around us.

STRis committed to creating a collaborative learning environment that supports deep technical understanding and recognizes the contributions and achievements of all team members. Our work is challenging, and we go home at night knowing that we pushed the envelope of technology and made the world safer.

STR is not just any company. Our people, culture, and attitude along with their unique set of skills, experiences, and perspectives put us on a trajectory to change the world. We can’t do it alone, though – we need fellow trailblazers. If you are one, join our team and help to keep our society safe! Visit us at www.str.us for more info.

STRis an equal opportunity employer. We are fully dedicated to hiring the most qualified candidate regardless of race, color, religion, sex (including gender identity, sexual orientation and pregnancy), marital status, national origin, age, veteran status, disability, genetic information or any other characteristic protected by federal, state or local laws.

If you need a reasonable accommodation for any portion of the employment process, email us at [e-mail] and provide your contact info.

Pursuant to applicable federal law and regulations, positions at STR require employees to obtain national security clearances and satisfy the requirements for compliance with export control and other applicable laws.