Senior Vulnerability Researcher/Reverse Engineer/CNO Developer (Onsite)

Vulnerability Researchers

Job Summary
Vulnerability Researchers at NightWing CODEX analyze systems to understand how they work and how they behave when they break. Candidates must be able to play both sides of the fence, both developing and defeating new and advanced security techniques. Projects are undertaken in small teams with close coordination with customers. All our engineers write code, but many of our engineers spend as much time taking systems apart as building new ones. A typical day can involve studying disassembly or writing Python to audit a piece of C++ code.

Required Skills

• Ability to obtain a U.S. Government TS/SCI Clearance
• Experience with C or C++
• Experience with Python
• Requires a Bachelor’s in Science, Technology, Engineering, or Mathematics (STEM preferred) and a minimum of 5 years of prior engineering experience or equivalent experience, or MS with minimum of 3 years of experience
• 4 or more of the following desired skills:
• Existing U.S. Government DOD TS or TS/SCI Clearance
• Understanding of OS Internals (any major OS)
• Experience reading or writing assembly (x86, x64, ARM, PPC, MIPS, SPARC, 68k, or others)
• Familiarity with stack frames, calling conventions, and memory management
• Understanding of network protocols (TCP/IP stacks, wire-level protocols, RF communications, BGP, routing protocols, or others)
• Experience with exploit mitigations such as DEP and ASLR
• Experience using reverse engineering tools such as Ghidra, IDA Pro, HexRays, Binary Ninja, or objdump
• Experience using debuggers such as gdb, WinDbg, OllyDbg
• Experience building and using tools to find, exploit, and productize vulnerabilities in complex software systems
• Utilizing full system emulation for research and analysis

Education

• Required: BS/MS in technical discipline (Equivalent work experience will be considered)