Software Design Engineer

Ascendion; Redmond (WA); Hybrid; USD 190,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Long-term disability insurance

Paid personal days

Vacation time

Holidays

Job summary

Ascendion is seeking a Software Design Engineer 4 in Redmond, WA, hybrid. The role focuses on building and enhancing AI-driven firmware security analysis pipelines, translating firmware into LLVM IR, and developing LLVM-based transformations to enable off-target analysis and fuzzing.

You will collaborate with security researchers and compiler engineers, contribute to open-source readiness, improve CI/CD automation, and produce well-tested, maintainable production code in C/C++ and Python.

Qualifications

• Bachelor's degree in CS/CE or related field.
• Strong experience in C/C++.
• Hands-on LLVM or compiler tech experience.
• Experience with fuzzing frameworks like libFuzzer/AFL.
• Strong security fundamentals and root-cause analysis.
• Python automation proficiency.
• Git-based workflows experience.
• Proven ability to write tested production code.

Responsibilities

• Build and maintain AI-driven firmware security analysis pipelines.
• Develop tooling and LLVM-based transformations.
• Create fuzzing harnesses and enhance vulnerability detection.
• Debug firmware rehosting issues and investigate crashes.
• Collaborate with security researchers and engineers.
• Contribute to open-source readiness and CI/CD automation.
• Produce well-documented, maintainable code.

Skills

C/C++

LLVM

Fuzzing

Python

Git

Production-grade code

Education

Bachelor's degree in Computer Science, Computer Engineering, or related technical field

Job description

Ascendion is a full service digital engineering solutions company. We make and manage software platforms and products that power growth and deliver captivating experiences to consumers and employees. Our engineering, cloud, data, experience design, and talent solution capabilities accelerate transformation and impact for enterprise clients. Headquartered in New Jersey, our workforce of 6,000+ Ascenders delivers solutions from around the globe. Ascendion is built differently to engineer the next.

Ascendion | Engineering to elevate life

We have a culture built on opportunity, inclusion, and a spirit of partnership. Come, change the world with us:

Build the coolest tech for world’s leading brands

Solve complex problems - and learn new skills

Experience the power of transforming digital engineering for Fortune 500 clients

Master your craft with leading training programs and hands-on experience

Experience a community of change makers!

Join a culture of high-performing innovators with endless ideas and a passion for tech. Our culture is the fabric of our company, and it is what makes us unique and diverse. The way we share ideas, learning, experiences, successes, and joy allows everyone to be their best at Ascendion.

Title: Software Design Engineer 4

Location: Hybrid/Redmond, WA

Typical Day in the Role

• A typical day on Project involves building and improving AI-driven firmware security analysis pipelines that automatically discover vulnerabilities in third-party firmware.
• Engineers spend their time developing low-level tooling in C++, Python, and LLVM, transforming firmware source code into analyzable LLVM IR, creating compiler passes, generating and refining fuzzing harnesses, and improving automated vulnerability detection workflows.
• Daily work may include debugging firmware rehosting issues, investigating crashes discovered during fuzzing campaigns, reducing false positives in security findings, and enhancing LLM-based systems that classify firmware functionality and generate analysis artifacts.
• Team members collaborate closely with security researchers, compiler engineers, and project leadership to review architecture, prioritize new capabilities, and validate analysis results across diverse firmware targets.
• As the project moves toward open-source release, engineers also contribute to code quality improvements, CI/CD automation, testing, documentation, dependency reviews, developer onboarding experiences, and release-readiness activities, helping transform advanced security research into a production-grade platform that can be used and extended by the broader security community.

Key projects:

• Build and Enhance Security Analysis Pipelines
• Develop preprocessing pipelines that compile C/C++ firmware code into LLVM Intermediate Representation (IR).
• Implement and maintain LLVM-based transformations to make firmware suitable for off-target analysis and fuzzing.
• Create and improve code-analysis workflows, including call-graph extraction, metadata generation, and static-analysis integrations.
• Design and maintain systems that generate and execute fuzzing campaigns using modern fuzzing frameworks and AI-assisted techniques.
• Improve crash triage systems that automatically identify, deduplicate, and analyze security findings.
• Develop automated mechanisms to classify code semantics and improve analysis accuracy.

Security Automation and Tooling

• Build scalable automation that combines compiler infrastructure, security tooling, and AI-driven workflows.
• Enhance vulnerability detection pipelines and help reduce false positives through improved analysis techniques.
• Improve reporting systems that transform raw security findings into actionable engineering insights.
• Validate analysis approaches across multiple firmware targets and environments.

Open-Source Readiness

• Improve system reliability, modularity, test coverage, and CI/CD automation.
• Create developer documentation, onboarding guides, and architectural references.
• Support dependency review, reproducible builds, and general open-source readiness activities.
• Help establish contribution workflows, issue triage practices, and release processes for external contributors.
• Write clean, maintainable, and well-tested code.
• Participate in design reviews and technical architecture discussions.
• Collaborate closely with engineers across security, hardware, and platform teams.
• Contribute to long-term technical strategy and platform evolution.

Required Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or a related technical field, or equivalent practical experience.
• Strong professional experience developing software in C/C++.
• Hands-on experience with compiler technologies, LLVM, or low-level systems programming.
• Experience working with fuzzing frameworks such as libFuzzer, AFL, AFL++, or similar technologies.
• Strong understanding of software security principles, including memory-safety vulnerabilities and root-cause analysis.
• Proficiency with Python for automation and tooling development.
• Experience using Git-based development workflows.
• Demonstrated ability to write well-tested, maintainable, and documented production code.

Preferred Qualifications

• Experience with firmware, embedded systems, device software, or bare-metal development.
• Knowledge of hardware abstraction layers (HALs), MMIO, emulation, rehosting, or cross-compilation techniques.
• Experience with static-analysis platforms such as CodeQL.
• Familiarity with program-analysis concepts such as call graphs, data-flow analysis, or IR transformations.
• Experience integrating AI, machine learning, or LLM technologies into engineering workflows.
• Previous open-source contributor or maintainer experience.
• Experience building CI/CD pipelines and release automation.
• Familiarity with Azure DevOps, GitHub, or similar development platforms.

What is the ideal background of a candidate for this role?:

• The ideal candidate for Project is a systems software engineer with a strong security mindset who enjoys working at the intersection of compiler technology, firmware analysis, fuzzing, and AI-assisted automation.
• They likely have several years of professional experience developing low-level software in C/C++, are comfortable working directly with LLVM and LLVM IR, and have hands-on experience building or modifying compiler passes, analysis tools, or developer tooling.
• The strongest candidates will come from backgrounds such as:
• Compiler and Program Analysis Engineering - experience with LLVM, code transformation, static analysis, CodeQL, call-graph analysis, dataflow analysis, or language tooling.
• Security Engineering and Research - experience with fuzzing (libFuzzer, AFL/AFL++), vulnerability discovery, crash triage, exploit mitigation, sanitizer technologies (ASan, UBSan, MSan), and root-cause analysis.
• Firmware or Embedded Systems Development - familiarity with firmware architectures, hardware abstraction layers (HALs), MMIO interfaces, cross-compilation, bare-metal systems, or rehosting techniques.
• Developer Platform and Tooling Engineering - experience building scalable automation pipelines, CI/CD systems, code-generation tools, testing frameworks, and production-quality open-source software.
• An ideal candidate is naturally curious and enjoys debugging difficult technical problems that span multiple domains—from understanding firmware internals and compiler behavior to improving AI-driven analysis workflows.
• They should be comfortable working in a research-oriented environment where ideas are rapidly prototyped and then hardened into reliable production systems.
• Experience integrating modern LLM-based workflows into developer tools or security pipelines is highly desirable, but deep expertise in AI is less important than having strong foundations in software engineering, security, and systems programming.

Top 3 Must-Have HARD Skills

• LLVM / Compiler Engineering - 5+ years
• C/C++ Systems Programming - 7+ years
• Security Fuzzing & Vulnerability Research - 3-5+ years

Salary Range: $1,90,000 - 2,00,000 Annually -Factors that may affect pay within this range may include geography/market, skills, education, experience, and other qualifications of the successful candidate.

Benefits:

The Company offers the following benefits for this position, subject to applicable eligibility requirements:

• [medical insurance]
• [dental insurance]
• [vision insurance]
• [401(k) retirement plan]
• [long-term disability insurance [short-term disability insurance]]
• [5 personal days accrued each calendar year. The paid time off benefits meet the paid sick and safe time laws that pertain to the City/ State]
• [10-15 days of paid vacation time]
• [6 paid holidays and 1 floating holiday per calendar year]