Senior Embedded Vulnerability Researcher: Exploits

The Charles Stark Draper Laboratory, Inc.; Cambridge (MA); On-site; USD 63,000 - 238,000; Full time

Job summary

Draper’s Offensive Cyber Security Group in Cambridge, MA seeks professionals to develop tailored security solutions for DoD and IC directives. Role covers vulnerability research, embedded system exploits, and tool development across GNU/Linux, RTOS, and various architectures.

Applicants should have 5–10 years in cybersecurity, strong reverse engineering skills with Ghidra/IDA/GDB, and hands-on hardware experience (JTAG/SWD/BDM, soldering). Security clearance eligibility required.

Qualifications

• Proficiency with program analysis methodologies and techniques.
• Reverse-engineering assessment techniques for firmware or embedded systems.
• Familiarity with binary file and filesystem structures.
• Hands-on proficiency with reverse engineering tooling (Ghidra, IDA, GDB, RR).
• Experience with JTAG/SWD/BDM and data extraction from eMMC/NAND/SPI flash.
• Exploitation techniques for embedded devices across platforms.
• Understanding of GNU/Linux, RTOS, user/kernel modes, and boot processes.

Responsibilities

• Assess hardware and software for security vulnerabilities using diverse technologies.
• Develop software meeting security requirements for tailored applications.
• Integrate capabilities with other tasks or groups to improve performance.
• Create new tools to detect and exploit vulnerabilities and system weaknesses.
• Document nominal functionality and changes; contribute to technical reports.

Skills

Ghidra

IDA

GDB

RR

C

C++

Python

Java

Bash

Powershell

x86

ARM

RTOS

GNU/Linux

Tools

JTAG/SWD/BDM

eMMC/NAND/SPI

Soldering

Job description

Draper’s Offensive Cyber Security Group in Cambridge, MA seeks professionals to develop tailored security solutions for DoD and IC directives. Role covers vulnerability research, embedded system exploits, and tool development across GNU/Linux, RTOS, and various architectures.

Applicants should have 5–10 years in cybersecurity, strong reverse engineering skills with Ghidra/IDA/GDB, and hands-on hardware experience (JTAG/SWD/BDM, soldering). Security clearance eligibility required.