Verve is on a mission to secure the world's critical infrastructure providers by bringing the tools and techniques of defense-in-depth strategies employed by best-in-breed IT practices to OT (Operational Technology).

We're a team of software developers, controls engineers, product managers, designers, and security professionals working to build software solutions that keep the bedrock of modern-day life safe: power, oil, gas, water, chemicals, medicine and other industries.

Verve's Agentless Device Inventory (ADI) group is responsible for developing software tools that let Verve collect basic device information from various embedded devices commonly found in Operational Technology (OT) environments. The ADI Research team owns the first part of this process, which involves figuring out what approaches look most promising for collecting this information and building working proofs of concept. This is a great role for curious folks with a broad tech skillset who enjoy a good puzzle.

What You'll Do

• Analyze, reverse-engineer, and document industrial network protocols, functions, and APIs

• Produce high-quality research documentation

• Develop communication proof of concepts

• Work with customers and industry partners to collect and analyze host and network analytic opportunities in production environments

• Hardware and software Vulnerability analysis

What You'll Need

• Experience utilizing analysis tools to conduct in-depth reverse engineering of software protocols and APIs

• Knowledge of at least one programming language

• Demonstrated ability to be self-driven and work independently

• Comfort working with unfamiliar technologies

• Knowledge of communication protocols

• Network and hardware systems troubleshooting skills

• Demonstrated ability to follow, write, and maintain procedural documentation

Nice to Have

• Knowledge of industrial communication protocols such as EtherNet/IP, BACnet, Modbus, Vnet/IP, Honeywell Mercury, ProfiNet, or MMS

• Experience working with specialized industrial hardware

• Experience with Python

• Experience with Wireshark