Reverse Engineer Researcher

SEI advances software engineering principles and serves as a national resource in software engineering, computer security, and process improvement. The CERT Division is seeking a Reverse Engineer Researcher for the Threat Analysis directorate to help organizations improve software-intensive systems and develop or acquire defect-free software within budget and on time.

About the role

The Reverse Engineer Researcher will reverse engineer malicious code, design and develop new analysis methods and tools, identify emerging threats, and participate in the broader security community. This role supports high-impact customers and contributes to national security initiatives.

Responsibilities

• Perform in-depth reverse engineering of malicious code, document findings, and transition results via reports, presentations, and technical exchanges.
• Explore and apply artificial intelligence to support reverse engineering and analyze AI systems through reverse engineering practices.
• Design, prototype, and transition new analysis methods and tools.
• Identify and document emerging and complex active security threats.
• Participate in the broader security community through collaboration, papers, and presentations.
• Mentor and train others while sharing knowledge effectively with technical and non-technical audiences.

Requirements

• BS in Computer Science or related discipline with eight (8) years of experience; OR MS with five (5) years of experience; OR PhD with two (2) years of experience.
• Analytical mindset and deep curiosity about how software works.
• Ability to balance rapid prototyping with maintainable tool development.
• Strong technical writing experience.
• Ability to handle confidential and sensitive information appropriately.
• Capability to manage shifting priorities and occasional moderate travel (15%).
• Must pass a background check and obtain/maintain an active Department of War security clearance.

Skills

• Reverse engineering software binaries for various architectures (user and kernel level).
• Static analysis tools (e.g., IDA Pro, NSA Ghidra, Binary Ninja).
• User-level and kernel-level debuggers (e.g., x32dbg, x64dbg, gdb, WinDbg).
• Native programming languages (e.g., C/C++) and high-level languages (e.g., Java, Python, GoLang).
• Software engineering and design concepts.
• Firmware and device driver development.
• Malware tradecraft and threat actor tactics, techniques, and procedures (TTPs).
• Malware signature creation and use, independent of detection technology.
• Operating system concepts, internals, and binary file formats (e.g., PE, ELF, Mach-O).
• Internet Protocols and network analysis tools (e.g., Wireshark, netcat).
• Compiler theory, cryptography, and malware deobfuscation techniques.
• Mobile device development and reverse engineering.
• Malware sandboxes or instrumentation frameworks (e.g., Frida, QEMU, Unicorn Engine).
• General understanding of artificial intelligence and machine learning, particularly in supporting reverse engineering and malware analysis.

Benefits

• 8% monthly retirement contribution (employer-funded).
• Tuition benefits for you and dependent children at CMU and other institutions.
• Flexible work arrangements and paid parental/military leave.
• Comprehensive medical, prescription, dental, and vision insurance.
• Generous paid time off and observed holidays.
• Life and accidental death and disability insurance.
• Free Pittsburgh Regional Transit bus pass and monthly WMATA transit benefit.
• Access to university resources, including mindfulness programs, childcare, and back-up care benefits.
• Annual professional development opportunities, including conference attendance, training, and certification reimbursement.
• Relocation assistance.
• Fitness center access.

Locations: Arlington, VA or Pittsburgh, PA. Full-time staff position.