Vulnerability Research Engineer

Penn State University; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Penn State University invites applications for a Vulnerability Researcher to join the Cyberspace Operations Research Department of ARL. The role involves researching exploitation techniques, reverse engineering, and developing proof-of-concept tools for sponsors and partners, with on-site collaboration and occasional travel.

Ideal candidates will have extensive vulnerability research experience, familiarity with security tools, and the ability to communicate complex technical information to

Qualifications

• Bachelor's Degree required or equivalent.
• 6+ years of relevant experience for Senior level; 3+ years for Advanced level.

Responsibilities

• Research cutting edge techniques and technologies for system exploitation.
• Leverage reverse engineering, vulnerability research, and software development to address needs and emerging requirements.
• Create proof-of-concept tools and configure test environments for sponsor demonstrations.
• Maintain relationships with sponsors through on-site technical discussions and presentations.
• Provide process enhancement for vulnerability analyses and penetration testing projects.
• Apply project management principles to lead tasks or projects.
• Mentor lower-level engineers to foster growth.

Skills

Reverse engineering

Vulnerability research

Malware analysis

CNO tool development

Networking fundamentals

Windows & Linux

X86_64 & ARM

Cyber operations

Technical communication

TS/SCI clearance

Education

Bachelor's Degree

Tools

Ghidra/IDA

Kali Linux

Angr/AFL++

QEMU/Unicorn

JIRA

Confluence

Job description

POSITION SPECIFICS

We are searching for a self-motivated Vulnerability Researcher to join our Cyberspace Operations Research Department of the Applied Research Laboratory (ARL) at Penn State University. The Cyberspace Operations Research Department provides technical expertise in adversarial tactics, techniques, and procedures (TTPs) to support system evaluation and provide security hardening support to various sponsors.

ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply.

You will:

• Research cutting edge techniques and technologies for system exploitation -
• Leverage expertise in reverse engineering, vulnerability research, and software development to address established needs and investigate solutions to emerging requirements
• Apply software engineering best practices to create proof-of-concept tools and configure test environments to perform demonstrations to sponsors and partners
• Assist the Cyberspace Operations Research Department Head in maintaining relationships with sponsors through on-site technical discussions, preparation and presentation of technical materials, and project-related correspondence
• Provide process enhancement for technical functionality evaluation, vulnerability analyses, cyberspace operations engineering, and penetration testing projects
• Apply project management principles and methods to the leadership of tasks or projects
• Provide guidance to lower-level engineers to foster professional growth

Additional responsibilities for higher level position includes:

• Understand broad strategic objectives and contribute to them; nurture and maintain relationships with major customers/grantors of external research and development grant funding
• Initiate new project concepts and seek funding; develop technical proposals and make presentations to customers/grant sponsors
• Mentor department staff in the development technical, project, and business development skills

Required skills/experience areas include:

• Documented application of reverse engineering and vulnerability testing tools (e.g. Ghidra/IDA, Kali Linux, Angr/AFL++, QEMU/Unicorn, etc)
• Reverse engineering, vulnerability research, malware analysis, and/or CNO tool development
• Computer networking fundamentals, Windows and *NIX operating systems, X86(64) and ARM or MIPS architectures
• Cyber operations architecture and software engineering practices
• Ability to express technical information clearly and concisely in documents and presentations for senior leaders to successfully comprehend and leverage for decision making
• Active government security clearance at TS/SCI level with eligibility for special accesses

Preferred skills/experience areas include:

• Cybersecurity exploit development and test environment configuration
• Cybersecurity penetration testing / cybersecurity Red Team testing / white hat hacking
• Military cyberspace operations or computer network operations
• Demonstrated history of successful project initiation efforts
• Agile software development methodology and tools
• Atlassian products (e.g., JIRA, Confluence)

Your working location will be fully on-site located at in State Col lege, PA . Options exist for occasional hybrid of on-site/work from home based on project-dependent ability. This position will require periodic travel to remote locations in support of testing as part of a small team of researchers, engineers, and technologists.

MINIMUM EDUCATION, WORK EXPERIENCE & REQUIRED CERTIFICATIONS

If filled as Cyber Security Engineer (ARL) - Senior Professional, this position requires:

• Bachelor's Degree
• 6+ years of relevant experience; or an equivalent combination of education and experience accepted
• Required Certifications: None

If filled as Cyber Security Engineer (ARL) - Advanced Professional, this position requires:

• Bachelor's Degree
• 3+ years of relevant experience; or an equivalent combination of education and experience accepted
• Required Certifications: None

ARL's purpose is to research and develop innovative solutions to challenging scientific, engineering, and technology problems in support of the Navy, the Intel Community (IC), and other federal government customers.

FOR FURTHER INFORMATION on ARL, visit o