Location: Rome,NY, USA
Collaborate with a team of creative problem solvers to test and evaluate systems through a Whitebox adversarial approach for a national agency to support military clients. Assess hardware and software-based systems based on the NIST 800-53 risk management framework (RMF) security controls. Apply specific functional and working or industry knowledge. Develop or contribute to solutions to a variety of problems of moderate scope and complexity, when needed. Provide reverse engineering, static and dynamic binary analysis, and vulnerability analysis of software on a variety of different platforms and operating systems. Write proof-of-concept software that simulates the behavior of analyzed binaries and their interactions with other system components and validate any discovered vulnerabilities. Author technical documentation of research or findings as it relates to all security mechanisms, including access control, encryption, and obfuscation. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal. com. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: .
Additional Qualifications: Experience in analyzing packet captures with tools, including Wireshark Knowledge of operating systems and security practices Knowledge of cryptographic algorithms and protocols Experience analyzing and executing test plans and procedures Experience developing or analyzing technical documentationBasic Qualifications: 3+ years of experience with reverse engineering or vulnerability analysis Experience with Python, C, or C++ programming languages Experience with embedded device software development and compilers, linkers, and binary code generation process Experience with static reverse engineering of software binaries, including Ghidra or IDA Pro Experience with finding and exploiting vulnerabilities in firmware binaries using static and dynamic reverse engineering techniques Experience with modern software exploitation techniques, secure boot process, and bootloader design implementation for iOS or Android platforms Experience with microcontroller security architecture and integrations, including ARM architecture, assembly language, or mobile OS's, such as Android or iOS Experience with extending or modifying developed exploit chains to devices or microcontrollers Top Secret clearance Bachelor's degree in CS, EE, Computer Engineering, Science, Technology, Engineering, or Mathematics