Vulnerability Research Engineer

The Pennsylvania State University; Ferguson Township (PA); Hybrid; USD 127,000 - 277,000; Full time

Job summary

The Pennsylvania State University is seeking a Vulnerability Researcher to join the Cyberspace Operations Research Department of the Applied Research Laboratory (ARL) in State College, PA. On-site work with occasional hybrid arrangements and travel to remote locations may be required.

Responsibilities include researching advanced exploitation techniques, performing vulnerability research and malware analyses, developing proof‑of‑concept tools, and presenting technical materials to sponsors.

Qualifications

• Documented reverse engineering and vulnerability testing experience.
• Experience in malware analysis and/or CNO tool development.
• Knowledge of Windows and Unix OS, and CPU architectures.
• Ability to communicate technical concepts to senior leaders clearly.

Responsibilities

• Research edge techniques for system exploitation and security hardening.
• Leverage RE, vulnerability research, and software development to address needs.
• Create proof-of-concept tools and configure test environments for demonstrations.
• Support sponsors with on-site technical discussions and presentations.
• Provide guidance to junior engineers and lead project tasks.
• Apply project management methods to leadership of tasks or projects.

Skills

Reverse engineering

Vulnerability testing

Malware analysis

CNO tool development

Networking fundamentals

Windows & Unix

Technical communication

TS/SCI clearance

Education

Bachelor's Degree

Tools

Ghidra

IDA

Kali Linux

Angr

AFL++

QEMU

Unicorn

Job description

POSITION SPECIFICS

We are searching for a self-motivated Vulnerability Researcher to join our Cyberspace Operations Research Department of the Applied Research Laboratory (ARL) at Penn State University. The Cyberspace Operations Research Department provides technical expertise in adversarial tactics, techniques, and procedures (TTPs) to support system evaluation and provide security hardening support to various sponsors. ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply.

Responsibilities

• Research cutting edge techniques and technologies for system exploitation.
• Leverage expertise in reverse engineering, vulnerability research, and software development to address established needs and investigate solutions to emerging requirements.
• Apply software engineering best practices to create proof-of-concept tools and configure test environments to perform demonstrations to sponsors and partners.
• Assist the Cyberspace Operations Research Department Head in maintaining relationships with sponsors through on-site technical discussions, preparation and presentation of technical materials, and project-related correspondence.
• Provide process enhancement for technical functionality evaluation, vulnerability analyses, cyberspace operations engineering, and penetration testing projects.
• Apply project management principles and methods to the leadership of tasks or projects.
• Provide guidance to lower-level engineers to foster professional growth.
• Additional responsibilities for higher level position includes: Understand broad strategic objectives and contribute to them; nurture and maintain relationships with major customers/grantors of external research and development grant funding; Initiate new project concepts and seek funding; develop technical proposals and make presentations to customers/grant sponsors; Mentor department staff in the development technical, project, and business development skills.

Your working location will be fully on-site located in State College, PA. Options exist for occasional hybrid of on-site/work from home based on project-dependent ability. This position will require periodic travel to remote locations in support of testing as part of a small team of researchers, engineers, and technologists.

Required skills/experience areas

• Documented application of reverse engineering and vulnerability testing tools (e.g. Ghidra/IDA, Kali Linux, Angr/AFL++, QEMU/Unicorn, etc)
• Reverse engineering, vulnerability research, malware analysis, and/or CNO tool development
• Computer networking fundamentals, Windows and *NIX operating systems, X86(64) and ARM or MIPS architectures
• Cyber operations architecture and software engineering practices
• Ability to express technical information clearly and concisely in documents and presentations for senior leaders to successfully comprehend and leverage for decision making
• Active government security clearance at TS/SCI level with eligibility for special accesses

Preferred skills/experience areas

• Cybersecurity exploit development and test environment configuration
• Cybersecurity penetration testing / cybersecurity Red Team testing / white hat hacking
• Military cyberspace operations or computer network operations
• Demonstrated history of successful project initiation efforts
• Agile software development methodology and tools Atlassian products (e.g., JIRA, Confluence)

Minimum Education, Work Experience & Required Certifications

• If filled as Cyber Security Engineer (ARL) - Senior Professional, this position requires: Bachelor's Degree 6+ years of relevant experience; or an equivalent combination of education and experience accepted. Required Certifications: None
• If filled as Cyber Security Engineer (ARL) - Advanced Professional, this position requires: Bachelor's Degree 3+ years of relevant experience; or an equivalent combination of education and experience accepted. Required Certifications: None

Background Checks/Clearances

Employment with the University will require successful completion of background check(s) in accordance with University policies. Notice regarding employment at the Applied Research Laboratory (ARL): Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas. You must be a U.S. citizen to apply.

Salary & Benefits

The salary range for this position, including all possible grades, is $127,080.00 - $277,200.00. This salary range includes an adjustment based on required geographic work location. Salary Structure - Information on Penn State's salary structure.

Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children. For more detailed information, please visit our Benefits Page.

Campus Security Crime Statistics

Pursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault and other matters. The ASR is available for review here.

EEO IS THE LAW

Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473.

Federal Contractors Labor Law Poster PA State Labor Law Poster Penn State Policies Copyright Information Hotlines

About Penn State

There’s a reason Penn State consistently ranks among the top one percent of the world’s universities. Across 24 campuses, our 100,000 students and 40,000 faculty and staff know the real measure of success goes beyond the classroom – it’s the positive impact made on communities across the world. Our ideals stem from our origins as Pennsylvania’s sole land‑grant institution, which allow us to continue to bring positive impact to humanity through our teaching, research, and engagement mission. And across the world is a community of Penn Staters – more than half a million strong – driven by that same spirit to serve our local and global communities. At Penn State, passion is met with collaboration in an environment that is rooted in shared pride for the accomplishments of our fellow students, faculty, staff, and alumni. Penn Staters cheer each other on to build a culture committed to service and engagement. Our University values represent our core ethical aspirations for all our daily activities and actions as students, faculty, staff, and volunteers at Penn State. Our values are as follows; Integrity, Respect, Responsibility, Discovery, Excellence, and Community. We Are Penn State. One Community. Impacting Many.