Lead, Security/Vulnerability Research Engineer

L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do. L3Harris is the Trusted Disruptor in defense tech, delivering end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.

About the role

L3Harris is seeking a senior-level Security/Vulnerability Research Engineer to join our team. This individual will perform reverse engineering tasks associated with vulnerability detection and manipulation of targeted systems, working with National Security customers to protect and defend our nation.

Responsibilities

• Perform vulnerability research on embedded systems and software applications to identify previously undisclosed security risks
• Reverse engineer multiple architectures and platforms as needed, including ARM, x86, x64, and MIPS
• Leverage both static and dynamic analysis tools for firmware/software evaluation
• Work with reverse engineering frameworks such as Ghidra or IDA Pro
• Bypass modern security controls (such as ASLR, NX, canaries) to develop a working proof-of-concept (PoC)
• Apply knowledge of offensive and defensive reverse engineering techniques, including countering and developing advanced security measures
• Design, develop, or analyze low-level system components, including kernel modules and other system foundational firmware services
• Develop tools and software solutions using Python scripts, C, or other programming languages as needed
• Work proficiently within Unix/Linux operating system environments

Requirements

• Active Top Secret/SCI security clearance required
• Bachelor’s Degree and minimum 9 years of prior relevant experience. Graduate Degree and a minimum of 7 years of prior related experience. In lieu of a degree, minimum of 13 years of prior related experience.

Skills

• 5+ years’ experience working with reverse engineering frameworks such as Ghidra or IDA Pro
• 5+ years’ experience performing vulnerability research on embedded systems and/or software applications
• Professional hands-on experience with diagnostic tools such as oscilloscopes, multi-meters, power supplies, and logic analyzers
• Experience in firmware emulation and debugging
• Experience with embedded hardware and software design, development, and testing processes
• Background in developing hardware platforms
• Competence in one or more low-level programming languages
• Knowledge and expertise in RF systems and technologies
• Familiarity with wired and wireless protocols including USB, SPI/I2C/1-Wire, Ethernet, PCI-Express, 802.11, Bluetooth, Cellular, and others
• Experience developing custom emulation solutions to enable dynamic analysis using tools such as QEMU
• Experience writing plugins for decompilers such as IDA and Ghidra
• Skill in soldering, prototyping, and analyzing electronic circuits
• Ability to lead and manage engineering teams effectively

Pay

In compliance with pay transparency requirements, the salary range for this role is:

• $135,000 - $250,500 in California, Massachusetts, New Jersey, Washington, the Greater D.C. area, Denver, or NYC areas
• $117,000 - $218,000 in Colorado, Hawaii, Illinois, Maryland, Minnesota, New York state, Cleveland Ohio, Vermont, and Virginia

Final offer amount may vary based on factors including but not limited to experience and geographic location.

Schedule

• 9/80 (Every other Friday off)
• Standard 5/8

Benefits

• Health and disability insurance
• 401(k) match
• Flexible spending accounts
• Employee Assistance Program (EAP)
• Education assistance
• Parental leave
• Paid time off
• Company-paid holidays

The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the applicability of collective bargaining agreements.