Senior Software Reverse Engineer

Peraton; Huntsville (AL); On-site; USD 112,000 - 179,000; Full time

Job summary

Peraton is seeking a Senior Software Reverse Engineer to join the SCAR Team in Huntsville, AL. You will analyze software, firmware, and hardware to reveal how systems work, identify vulnerabilities, and support mission objectives.

You will use Ghidra, GDB, and virtualization to perform deep analysis and provide actionable insights. Responsibilities include live debugging, static and dynamic reverse engineering, and collaboration with DOCEX and CONOPS teams.

Qualifications

• Bachelor’s degree with 8+ years of relevant experience; OR Masters’s with 6+ years; OR PhD with 4+ years; 4 years in lieu of a degree.
• TS/SCI with ability to obtain a poly
• 3+ years of software reverse engineering experience, preference for malware or vulnerability research
• Experience with virtualization platforms (VMware, KVM/QEMU) for dynamic analysis
• Experience with disk image analysis tools (Autopsy, guestfish) and SWRE toolchain (Ghidra, GDB, Wireshark, NMAP, binutils)
• Networking analysis (Wireshark, nmap) and Linux/Unix environments
• Live debugging with GDB; correlate with Ghidra analysis
• Knowledge of C, C++, Assembly and Python; OS internals; x86/x64 architecture
• Understanding of security practices and identifying flaws in software architecture

Responsibilities

• Perform in-depth analysis of software, firmware, and hardware to uncover functionality and vulnerabilities.
• Use virtualization/sandboxing to observe real-time behavior in native environments.
• Live on-system debugging with GDB; correlate with static Ghidra analysis.
• Apply static reverse engineering in Ghidra to reveal hidden logic and indicators.
• Integrate findings with CONOPS and exploitation planning (DOCEX).
• Identify undocumented features and model/explain features via PoC techniques.
• Master toolchain for end-to-end exploitation; mentor junior engineers.

Skills

Reverse engineering

Ghidra

GDB

Wireshark

VMware/KVM

Linux

C/C++

Python

x86/x64 assembly

Education

Bachelor’s degree in a relevant field

Master’s degree in a related field

PhD in a relevant field

Tools

Ghidra

GDB

Wireshark

MobaXterm

NMAP

binutils

Job description

Responsibilities

Overview:We are seeking a highly skilled and experienced Senior Software Reverse Engineer to join our SCAR Team. In this role, you will perform indepth analysis of software, firmware, and hardware systems to uncover their true functionality, identify vulnerabilities, and understand theiroperational context. This position requires a holistic approach, combining dynamic system analysis, static binary reverse engineering, anddocument exploitation to reveal not just what a system does, but why and how it supports its mission objectives.

Key Responsibilities:

• System Analysis: Conduct comprehensive analysis of compiled software and binaries. Employ forensic techniques to extract criticalartifacts, understand system architecture, and identify key software components.
• Dynamic System & Environment Analysis: Utilize virtualization and sandboxing environments (VMware, KVM/QEMU) to run andobserve software in its native operating environment. Perform system call tracing, network monitoring, and file system analysis toreveal real-time behaviors and interactions.
• Live Debugging and Analysis: Perform live, on-system debugging using tools like the GNU Debugger (GDB) to step through codeexecution in real-time. Correlate dynamic findings directly with static analysis from Ghidra to validate assumptions, understandcomplex logic, and uncover obfuscated functionality.
• Static Reverse Engineering: Use advanced reverse engineering tools, with a focus on Ghidra, to decompile and disassemblesoftware. Analyze code paths, extract indicators, and uncover hidden or malicious logic that is not apparent through dynamicanalysis alone.
• CONOPS and Document Exploitation (DOCEX): Collaborate with analysts to integrate findings from system and operationaldocuments. Use this context to understand the system's Concept of Operations (CONOPS), providing significance and priority toexploitation efforts.
• Vulnerability and Capability Research: Investigate and identify vulnerabilities, undocumented features, and novel capabilities withinthe target system. Develop proof-of-concept exploits and assess their potential impact on operational dependencies. Model andSimulate specific features and functions to understand how the software was developed, compiled, and deployed.
• Tool Chain Mastery: Employ a specialized toolchain for analysis, including disk imagers, virtual machine managers, networkscanners, and debuggers to perform end-to-end exploitation.
• Mentorship: Mentor junior engineers in specific SWRE methodologies, tools, and techniques.

Qualifications

Required Qualifications:

• Bachelor’s degree with 8+ years of relevant experience; OR Masters’s degree with 6+ years of relevant experience; OR PhD with 4+ years of relevant experience; an additional 4 years of relevant experience considered in lieu of a degree
• TS/SCI with ability to obtain a poly
• 3+ years of relevant experience in software reverse engineering, with a preference for experience in material exploitation, malware analysis, or vulnerability research.
• Experience with virtualization platforms (VMware Workstation, KVM/QEMU) for dynamic analysis, sandboxing, and systememulation.
• Experience with forensic disk image analysis using tools like Autopsy or guestfish to mount, modify, and extract artifactsfrom raw disk images.
• Experience in the SWRE toolchain, including Ghidra, GDB, Wireshark, MobaXterm, NMAP, or the Linux binutils suite (e.g., readelf,strace, ltrace, ldd).
• Experience with network analysis (Wireshark, nmap) to baseline system behavior and identify communication protocols.
• Experience in Linux/Unix environments, including system administration, network configuration, SSH key management (sshkeygen, virt-customize), or advanced command-line tools.
• Demonstrated ability to perform live debugging of complex applications using GDB, including setting breakpoints, inspecting memory, and analyzing program state to support reverse engineering efforts.
• Knowledge of low-level programming (C, C++, Assembly) and experience with scripting languages like Python.
• Understanding of operating system internals, x86/x64 assembly, and CPU architecture.
• A solid understanding of common security practices and the ability to identify security flaws in software architecture.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.