Senior Embedded Security Engineer (Reverse-Engineering)

CACI; Florham Park (NJ); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI seeks an experienced Senior Embedded Software Engineer to analyze embedded systems, uncover vulnerabilities, and develop custom tools for security assessment. You will work across firmware, drivers, and hardware interfaces, coordinating with hardware engineers to access debug interfaces and inspect state.

Responsibilities include reverse engineering, firmware extraction, static/dynamic analysis, and Python-based automation.

Qualifications

• Requires US citizenship and ability to obtain a security clearance.

Responsibilities

• Reverse engineer embedded firmware, device drivers, and telecom systems to identify undocumented functionality and security issues.
• Perform firmware extraction, binary diffing, static and dynamic analysis, and hardware-assisted debugging.
• Collaborate with hardware engineers to access debug interfaces (e.g., JTAG, SWD), extract flash images, and inspect hardware state.
• Develop custom tools and scripts (e.g., in Python) to automate analysis workflows such as firmware unpacking, protocol decoding, and memory analysis.
• Investigate edge-case behaviors, error-handling routines, and initialization logic to reveal attack surfaces.
• Document findings and translate complexity into actionable reports for security and engineering teams.

Skills

Embedded software

Reverse engineering

C/C++/asm

RTOS

IPC mechanisms

Hardware interfaces

Python

Disassembly concepts

Embedded security

Security clearance

Cybersecurity research

PowerPC assembly

ARM assembly

Linux kernel

FPGA/SoC

Hardware debugging

Tooling for analysis

Tools

IDA Pro

Ghidra

Binary Ninja

GDB

JTAG

Job description

CACI seeks an experienced Senior Embedded Software Engineer to analyze embedded systems, uncover vulnerabilities, and develop custom tools for security assessment. You will work across firmware, drivers, and hardware interfaces, coordinating with hardware engineers to access debug interfaces and inspect state.

Responsibilities include reverse engineering, firmware extraction, static/dynamic analysis, and Python-based automation.