Research Scientist, GCCIS Department of Cybersecurity

About the role

This position involves conducting security research on open-source cryptographic software. The successful candidate will find and fix implementation vulnerabilities, contribute fixes upstream, and support sponsored research. This is a soft-money position where continuation depends on the candidate's ability to obtain external funding. It is a one-year appointment with the possibility of renewal based on available funding.

Responsibilities

• Analyze cryptographic library source code and protocol implementations for security defects, including traditional defects and side-channel vulnerabilities
• Develop patches and tests and follow contributions through upstream code review to acceptance
• Handle security-sensitive findings under coordinated disclosure
• Contribute substantively to proposals for external funding
• Guide graduate students on sponsored projects
• Design and conduct scientific research experiments using advanced knowledge of research field and theory
• Analyze results and produce reports and figures for presentation and publication
• Write manuscripts for peer-reviewed publication and assist in grant writing
• Develop and deliver presentations of research results at conferences
• Participate in outreach activities involving tours, presentations, and open houses
• Engage in professional development to stay current on emerging research and technology in relevant field

Requirements

• PhD or equivalent doctorate in computer science, computer engineering, electrical engineering, or a closely related field (preferred); Master's degree in related field (minimum)
• 1 year of relevant experience post-degree (preferred); 3 years of relevant experience (minimum)
• Equivalent combination of experience and education may be considered
• Must be eligible to work in the United States

Skills

• Proficiency with Linux, particularly command line and coreutils
• Software engineering experience, particularly C and assembly
• Applied cryptography and side-channel analysis
• Familiarity with open-source cryptography libraries, particularly OpenSSL
• Open-source contribution workflow, particularly git and pull requests
• Research proposal writing for external sponsors
• Knowledge of principles and practices of relevant field of research
• Knowledge of scientific research theory and methods
• Skill in Microsoft Office Suite and applicable research software
• Skill in scientific writing with attention to detail and precision
• Ability to collect, analyze, and report on complex data sets
• Ability to independently plan and execute research

Pay

$65,900.00 – $105,400.00 annual salary range. RIT considers factors such as scope and responsibilities, candidate's work experience, education/training, key skills, internal peer equity, and market and organizational considerations when extending an offer.

Work location

Hybrid

Job level

Specialized Contributor Level 2 — a fully functional role requiring established knowledge of the profession or field of work. Responsible for completing substantive assignments and projects. Problems are varied and non-routine, and resolution requires exercising judgment, analysis, advisement, creativity, and understanding broader sets of issues. May provide assistance to entry-level staff.