Vulnerability Researcher: Embedded Security & Tools

Battelle Memorial Institute; Virginia (MN); On-site; USD 127,000 - 181,000; Full time

Benefits offered by this job

Tuition assistance

Mentorship culture

Autonomy in research projects

Job summary

Battelle Memorial Institute is seeking a Mid-level Vulnerability Researcher to explore how embedded devices operate, break them down, and build automated tools. You will work with disassemblers, debuggers, and a close-knit team to push the edge of current techniques.

Based in Columbus, OH or Chantilly, VA, you’ll join an elite team with access to mentoring and extensive IRAD opportunities. A strong background in assembly, debugging, and C/Python is expected.

Qualifications

• Bachelor's degree in related field with relevant experience or higher degrees
• Strong understanding of reading assembly language and using debugging tools
• Experience with disassemblers used for vulnerability research (Ghidra, IDA Pro, BinaryNinja)
• Experience with x86/x64/ARM/MIPS/PowerPC assembly languages
• Experience with debuggers (WinDbg, OllyDbg, gdb)
• Experience with multiple OS environments (Android, iOS, Windows, Linux, MacOS, RTOS)
• Knowledge of exploitation techniques (ret2libc, use-after-free, type confusion)
• Knowledge of DEP/ASLR/NX security protections
• Proficiency in C and/or Python
• Ability to work in small fast-paced teams and learn continually

Responsibilities

• Research and debug embedded devices using disassemblers and debuggers
• Develop automated, scalable vulnerability research tools and pipelines
• Collaborate with a multidisciplinary team to advance embedded security solutions
• Contribute to projects from silicon to systems with mentors and peers

Skills

Reading assembly language

Debugging tools

Ghidra/IDA/BinaryNinja

C and Python programming

Embedded systems knowledge

Education

Bachelor's degree in related field, 5+ years experience

Master's or PhD in related field

Tools

Ghidra

IDA Pro

BinaryNinja

Job description

Battelle Memorial Institute is seeking a Mid-level Vulnerability Researcher to explore how embedded devices operate, break them down, and build automated tools. You will work with disassemblers, debuggers, and a close-knit team to push the edge of current techniques.

Based in Columbus, OH or Chantilly, VA, you’ll join an elite team with access to mentoring and extensive IRAD opportunities. A strong background in assembly, debugging, and C/Python is expected.