What are the responsibilities and job description for the Reverse Engineer/Vulnerability Researcher position at TekStream Solutions?
Reverse Engineer/Vulnerability Researcher
Secret clearance or higher
Columbus, Ohio
Performs assignments of a routine degree of complexity by compiling and evaluating design and test data, preparing technical specifications, analyzing technical data to determine appropriate limits and variables for electrical/electronic systems, components, equipment, and networks.
Assists in the interpretation of results and writing of small sections of technical reports.
Completes assigned project work within schedule and budget constraints.
THE FOLLOWING IS REQUIRED
- Bachelor’s in Computer Science, Computer Engineering, Electrical Engineering, or related field of study and ( 2) years of experience, OR Master’s degree in a relevant field, OR an equivalent combination of education/experience in a relevant field
- Develop software to run in user-mode or kernel-mode
- Ability to code in C or C
- Ability to use a scripting language (Python, Perl, Ruby, etc.)
- Experience with PC and embedded systems architecture to include boot processes and OS internals
- Experience with a disassembler for vulnerability research (IDA Pro, BinaryNinja, etc.)
- Understand network protocols
- Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
- Experience with one or more debuggers (WinDbg, OllyDbg, gdb, etc.)
- Experience with vulnerability research on one or more operating systems: Android, iOS, Windows, Linux, MacOS, VxWorks, QNX, RTOSs, or other custom operating systems
- Ability to demonstrate good organization, documentation, communication, problem-solving, and teamwork skills
- Knowledge of common mitigation techniques (DEP, ASLR, etc.)
- Familiarity with fuzzers
- Must be a sole US citizen with an active DoD Secret security clearance
THE FOLLOWING IS DESIRED
- Participation in CTFs
- Ability to analyze assembly-level code on multiple platforms (x86, x64, ARM, MIPS, PowerPC, etc.)
- Experience with symbolic analysis
- Ability to analyze network protocols throughout all layers of the network stack
- Background in software engineering and architecture