Senior Vulnerability Researcher

Battelle UK Limited; Beavercreek (OH); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Tuition assistance

Hybrid work model

401(k) retirement plan

Paid time off

Medical, dental, and vision coverage

Job summary

Battelle UK Limited is seeking an aspiring Senior Vulnerability Researcher to work from its Beavercreek, Columbus, or Chantilly offices. The role involves researching and debugging embedded devices, working with disassemblers and debuggers, and developing tools for vulnerability research. Candidates should have a relevant degree and extensive experience in areas such as assembly languages, debugging tools, and vulnerability research on various operating systems. The position offers a flexible, hybrid work arrangement and various employee benefits.

Qualifications

• 8 years of experience in the field, or equivalent combination of education and experience.
• Ability to develop software to run in user-mode or kernel-mode.
• Experience with vulnerability research on operating systems like Android, iOS, Windows, and Linux.

Responsibilities

• Research and debug embedded devices with disassemblers and debuggers.
• Develop tools and techniques for vulnerability research.
• Collaborate with a team of researchers to share ideas.

Skills

Reading assembly language

Debugging tools

Experience with disassemblers

C programming

Understanding of network protocols

Passion for improving skills

Education

Bachelor's degree in Computer Science or related field with 8 years of experience

Master's degree in related field with 5 years of experience

PhD in a related field with 2 years of experience

Tools

Ghidra

IDA Pro

BinaryNinja

WinDbg

OllyDbg

gdb

Job description

Job Summary

Battelle is currently seeking an aspiring Senior Vulnerability Researcher to work from our Columbus, OH; Chantilly, VA; or Beavercreek offices.

As a Senior Vulnerability Researcher, you will work with disassemblers and debuggers to quickly understand how embedded devices operate. You will use and build tools that push past the edge of current tools and techniques. In a given day you will research and debug an embedded device while getting the chance to bounce ideas off of a close-knit team of researchers. We have the tools and the mentors you will need to take yourself to the next level and who are eager to learn from your experience.

Key Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related field of study with 8 years of experience; Master's degree in related field with 5 years of experience; PhD in a related field with 2 years of experience; or an equivalent combination of education and experience
• Develop software to run in user-mode or kernel-mode
• Strong understanding in reading assembly language and using debugging tools
• Experience with a disassembler for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with one or more debuggers (WinDbg, OllyDbg, gdb)
• Experience with vulnerability research on one or more operating systems: Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or other custom operating systems
• Knowledge of advanced exploitation techniques (ret2libc,use-after-free,type confusion)
• Knowledge of exploit protection techniques (DEP, ASLR/NX)
• Ability to code in C
• Understanding of network protocols
• Ability to work individually and in small fast paced team environments
• Passion and drive to constantly need to improve your skill set
• Must Be a US Citizen with the ability and willingness to obtain a Secret or higher clearance

Preferred Qualifications

• Experience using fuzzing tools such as AFL or Peach
• Concolic analysis research and implementation
• Experience emulating embedded platforms for live debugging
• Experience with microcontrollers
• Experience with symbolic analysis
• Active Secret security clearance

Some of the Extras That Make Working Here Great

• Learn (tuition assistance, paid training) and teach (get published, speak at a conference)
• Software and Intellectual Property development royalty sharing
• Mentorship and learning culture
• Internally funded and guided research projects with large amounts of individual autonomy

Benefits: Live an Extraordinary Life

• Balance life through a compressed work schedule: Most of our team follows a flexible, compressed work schedule that allows for every other Friday off-giving you a dedicated day to accomplish things in your personal life without using vacation time.
• Enjoy enhanced work flexibility, including a hybrid arrangement: You have options for where and when you work. Our Together with Flexibility model allows you to work 60% in-office and 40% remote, with Monday and Tuesday as common in-office days, dependent on team and position needs.
• Take time to recharge: You get paid time off to support work-life balance and keep motivated.
• Prioritize wellness: Stay healthy with medical, dental, and vision coverage with wellness incentives and benefits plus a variety of optional supplemental benefits.
• Better together: Coverage for partners, gender-affirming care and health support, and family formation support.
• Build your financial future: Build financial stability with an industry-leading 401(k) retirement savings plan. For most employees, we put in 5 percent whether you contribute or not, and match your contributions on top of that.
• Advance your education: Tuition assistance is available to pursue higher education.

Vaccinations & Safety Protocols

Battelle may require employees, based on job duties, work location, and/or its clients' requirements to follow certain safety protocols and to be vaccinated against a variety of viruses, bacteria, and diseases as a condition of employment and continued employment and to provide documentation that they are fully vaccinated. If applicable, Battelle will provide reasonable accommodations based on a qualified disability or medical condition through the Americans with Disabilities Act or the Rehabilitation Act or for a sincerely held religious belief under Title VII of the Civil Rights Act of 1964 (and related state laws).

Battelle is an equal opportunity employer. We provide employment and opportunities for advancement, compensation, training, and growth according to individual merit, without regard to race, color, religion, sex (including pregnancy), national origin, sexual orientation, gender identity or expression, marital status, age, genetic information, disability, veteran-status veteran or military status, or any other characteristic protected under applicable Federal, state, or local law. Our goal is for each staff member to have the opportunity to grow to the limits of their abilities and to achieve personal and organizational objectives. We will support positive programs for equal treatment of all staff and full utilization of all qualified employees at all levels within Battelle.

No statement herein is intended to imply any authorities to commit Battelle unless special written permission is granted by Battelle's Legal Department.