Senior Embedded Vulnerability Researcher (Hybrid)

Battelle Memorial Institute; Beavercreek (OH); On-site; USD 135,000 - 220,000; Full time

Job summary

Battelle Memorial Institute is seeking a Senior Vulnerability Researcher to work from our Columbus, OH; Chantilly, VA; or Beavercreek offices. You will disassemble and debug embedded devices, build tools, and contribute to cutting-edge vulnerability research in a collaborative team.

The role requires expertise in assembly, disassembly tools, C programming, OS vulnerability research, and a willingness to obtain/or maintain a security clearance.

Qualifications

• Bachelor’s degree with multiple years of experience or advanced degrees with fewer years.
• Develop software to run in user-mode or kernel-mode.
• Strong understanding of reading assembly language and debugging tools.
• Experience with vulnerability research disassemblers (Ghidra/IDA/BinaryNinja).
• Experience with multiple assembly languages and debuggers.
• Experience with vulnerability research across OSes.
• Knowledge of exploitation and protection techniques.
• Ability to code in C and understand network protocols.
• Ability to work independently and in small teams.
• US Citizenship with ability to obtain a Secret or higher clearance.

Responsibilities

• Work with disassemblers and debuggers to understand embedded devices.
• Research and debug embedded devices and build useful tools.
• Collaborate with a close-knit team of researchers to push boundaries.

Education

Bachelor’s degree in Computer Science/Computer Engineering/Electrical Engineering

Master’s degree in related field

PhD in related field

Equivalent combination of education and experience

Tools

Ghidra

IDA Pro

BinaryNinja

Job description

Battelle Memorial Institute is seeking a Senior Vulnerability Researcher to work from our Columbus, OH; Chantilly, VA; or Beavercreek offices. You will disassemble and debug embedded devices, build tools, and contribute to cutting-edge vulnerability research in a collaborative team.

The role requires expertise in assembly, disassembly tools, C programming, OS vulnerability research, and a willingness to obtain/or maintain a security clearance.