Reverse Engineer Researcher

SEI advances software engineering principles and serves as a national resource in software engineering, computer security, and process improvement. The institute partners with defense and government organizations, industry, and academia to improve software-intensive systems, ensuring they are defect-free, within budget, and on time.

About the role

The CERT Division of the Software Engineering Institute (SEI), a federally funded research and development center at Carnegie Mellon University, is seeking a Reverse Engineer Researcher for the Threat Analysis directorate.

Responsibilities

• Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, and identify and address emerging and complex threats.
• Perform in-depth reverse engineering of malicious code; document and transition results in reports, presentations, and technical exchanges.
• Explore ways to use artificial intelligence to support reverse engineering and apply reverse engineering practices to artificial intelligence systems.
• Design, prototype, and transition new analysis methods and tools.
• Identify and document emerging and complex active security threats.
• Participate in the broader security community through collaboration, papers, and presentations.

Requirements

• BS in Computer Science or related discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR PhD in the same fields with two (2) years of experience.
• Experience with reverse engineering software binaries for a variety of architectures, both at the user level and kernel level.
• Proficiency with static analysis tools (e.g., IDA Pro, NSA Ghidra, Binary Ninja).
• Experience with user-level and kernel-level debuggers (e.g., x32dbg, x64dbg, gdb, WinDbg).
• Knowledge of native programming languages (e.g., C/C++) and high-level programming languages (e.g., Java, Python, GoLang).
• Understanding of software engineering and design concepts.
• Experience with firmware and device driver development.
• Knowledge of malware tradecraft and threat actor tactics, techniques, and procedures (TTPs).
• Experience with malware signature creation and use, independent of detection technology.
• Understanding of operating system concepts and internals, and binary file formats (e.g., PE, ELF, Mach-O).
• Knowledge of internet protocols and network analysis tools (e.g., Wireshark, netcat).
• Familiarity with compiler theory, cryptography, and malware deobfuscation techniques.
• Experience with mobile device development and reverse engineering.
• Knowledge of malware sandboxes or instrumentation frameworks (e.g., Frida, QEMU, Unicorn Engine).
• General understanding and experience in artificial intelligence and machine learning, particularly using AI to support reverse engineering and malware analysis.

Qualifications

• Enjoy working on emerging and complex malware analysis and reverse engineering problems.
• Analytical mindset and deep curiosity about how software works.
• Ability to balance rapid prototyping with maintainable tool development.
• Strong technical writing experience.
• Ability to handle confidential and sensitive information appropriately.
• Ability to manage continual shifting priorities.
• Enjoy mentoring and training others, as well as sharing knowledge.
• Effective communication with technical and non-technical audiences.
• Willingness to travel (15%) to sponsor sites, conferences, and offsite meetings.
• Must be subject to a background check and obtain and maintain an active Department of War security clearance.

Benefits

• 8% monthly contribution to retirement without employee contribution.
• Tuition benefits for CMU and other institutions for you and your dependent children.
• Healthy work/life balance with flexible work arrangements and paid parental and military leave.
• Access to university resources including mindfulness programs, childcare, and back-up care benefits.
• Monthly transit benefit on WMATA and free transportation on the Pittsburgh Regional Transit System.
• Annual professional development opportunities, including conference attendance, training, and certification reimbursement.
• Relocation assistance.
• Comprehensive medical, prescription, dental, and vision insurance.
• Generous retirement savings program with employer contributions.
• Ample paid time off and observed holidays.
• Life and accidental death and disability insurance.
• Free Pittsburgh Regional Transit bus pass.
• Access to Family Concierge Team for childcare navigation.
• Fitness center access.

Location: Arlington, VA or Pittsburgh, PA. Full-time staff position.