Staff Cyber Software Engineer

Northrop Grumman; Cincinnati (OH); On-site; USD 177,000 - 265,600; Full time

Benefits offered by this job

401k matching

Flexible work arrangements

Health insurance coverage

Paid time off (PTO)

Job summary

Northrop Grumman is seeking a Senior Vulnerability Research Engineer for its Cincinnati, Ohio location. The role involves researching vulnerabilities and conducting reverse engineering on embedded systems, as well as developing proof of concepts.

The ideal candidate should have extensive programming experience, educational qualifications, and a US citizenship to obtain a Top-Secret clearance.

Qualifications

• 12 years of programming experience with B.S. degree.
• 10 years of programming experience with M.S. degree.
• 7 years of programming experience with Ph.D.

Responsibilities

• Research vulnerabilities and perform reverse engineering.
• Conduct vulnerability analysis on drivers and interfaces.
• Develop proof of concepts based on research findings.

Skills

Reverse engineering

Vulnerability analysis

Programming in C or C++

Fuzzing research techniques

Education

B.S. degree in Computer Science or related field

M.S. degree in Computer Science or related field

Ph.D. in Computer Science or related field

Tools

IDA Pro

Ghidra

BinaryNinja

Radare2

Job description

Overview

RELOCATION ASSISTANCE: Relocation assistance may be available

CLEARANCE REQUIRED FOR START: Yes

CLEARANCE TYPE: Top Secret

TRAVEL: Yes, 10% of the Time

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people\'s lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation\'s history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they\'re making history.

Join part of Mission Systems sector, focused on the development of new capabilities for our military and intelligence customers around the globe. Our Northrop Grumman Cincinnati, Ohio small business culture operates collaboratively within a larger corporation providing the benefits of both. This unique relationship offers employees the ability to know everyone at the site while working on technologies and products that are beyond state-of-the-art. You and your team will wrestle with the next big problems in an atmosphere of collaboration and cooperation, sharing your expertise while learning from the expert next to you. Remember when you were excited about getting to work because the challenge of the problem, the importance of the solution and the fun you had with your team? It\'s that kind of place! But don’t take my word for it. See for yourself! See why we receive comments on our YouTube Videos like “This company is insanely advanced” and “Wow. This is mind blowing.” See some of our recent Awards and Recognition and read about some of the reasons to live in Cincinnati.

Northrop Grumman Mission Systems (NGMS) is seeking a Senior level Vulnerability Research Engineer to join our team of qualified, diverse individuals at our Cincinnati, Ohio location. The NGMS Cincinnati team solves complex problems developing cyber hardware and software solutions with learning opportunities in Offensive Cyber Operations (OCO).

Responsibilities

• Research vulnerabilities and perform reverse engineering on embedded systems.
• Plan and Conduct vulnerability analysis on user and kernel mode drivers and interfaces.
• Develop, design, and implement proof of concepts on based research findings and documents.

Basic Qualifications

• B.S. degree in Computer Science, Computer Engineering or related field and 12 years of programming experience OR M.S. degree in Computer Science, Computer Engineering or related field and 10 years of programming experience OR Ph.D. and 7 years of of programming experience.
• Experience with a disassembler for vulnerability research (IDA Pro, Ghidra, BinaryNinja, radare2, etc.).
• Experience programming in C or C++.
• Experience with fuzzing research techniques (AFL++, taint analysis, PIN, Dynamic Memory Instrumentation, etc.).
• US Citizenship is required
• The ability to obtain and maintain a Top-Secret clearance to start.

Preferred Qualifications

• Active Top-Secret clearance.
• Experience finding and developing exploits
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, etc.).
• Development of disassembler extensions for tools such as IDA pro or Ghidra.
• Low level debug tools such as gdb, WinDbg, or OllyDbg.
• Experience with vulnerability research on one or more operating systems (Android, IOS, Windows, Linux, etc.).
• Experience with emulation (Renode, QEMU, etc.)
• Reverse engineering hardware and software such as embedded systems (IoT), mobile devices/phones.
• Development of software to run in user mode or kernel mode.
• Apply creativity and vision for the future that require integration of related disciplines.
• Certified Reverse Engineering Analyst (CREA).

Northrop Grumman has 401k matching and personal growth opportunities. In addition, we offer a flexible work arrangement and the option of a 9/80 or 4/10 work schedule. The 9/80 schedule allows employees who work nine-hour days Monday through Thursday to take every other Friday off. The 4/10 schedule allows employees to work four ten-hour days Monday through Thursday and take off every Friday.

Compensation and Benefits

Primary Level Salary Range: $177,000.00 - $265,600.00

The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate\'s experience, education, skills and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

Application Period and EEO

The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.