Overview:
Keysight is on the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.
Our powerful, award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. Diversity, equity & inclusion are integral parts of our culture and drivers of innovation at Keysight. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.
Keysight is looking to hire a senior security software engineer to develop binary level program analysis capabilities for our security assessment products. The successful candidate will take a key role in design and implementation of novel and scalable tools for automated vulnerability discovery and software composition analysis in firmware binaries using static analysis, symbolic execution, code similarity detection and abstract interpretation techniques.
Please NOTE, that we consider candidates based in Bucharest who can work from the Keysight office 3 days/ week. Besides, we also consider UK-based candidates, who can work remotely or onsite.
Responsibilities:
- Developing and maintaining IoT firmware and device security assessment tools
- Developing and maintaining software composition analysis tools
- Performing research in embedded device firmware security and compose articles and papers for publication
- Contribute to our well-read blog about any technical topic of interest, including day-to-day work or outside interests, when possible.
Qualifications:
Required Skills:
- Broad knowledge of network protocols.
- Practical or academic experience with program analysis
- Sound knowledge of C/C++, compilers and intermediate code representation
- Experience with automating binary analysis tasks in Ghidra, IDA Pro, Binary Ninja or Radare2
- Experience with building dynamic analysis tools using CPU/system emulation frameworks
- Good programming skills in multiple languages (Python, Ruby, C, C++, assembly, scripting, etc).
- Ability to analyze and describe vulnerabilities and attack methods.
- Creative, problem-solving approach to projects.
- College degree in CS or EE or equivalent experience.
- 5 + years of relevant experience in security research position.
- Excellent communication and teamwork skills with a drive to attain a combined success.
- Reliable and dependable team player.
- Great attention to detail and personal quality assurance.
Preferred Skills:
- Strong programming skills are highly preferred.
- At least one publicly available vulnerability discovery, exploit development, and/or open source tool.
- Strong domain knowledge in vulnerability research and exploit development.
- Experience in static and dynamic reverse engineering of binaries.
- Experience administering a variety of network and server equipment.
- Experience with Agile methodologies.
- Familiarity with ARM architecture
- Experience with firmware reverse engineering