Job Title: Cyber Reverse Engineer, Senior
Job Category: Engineering
Time Type: Full time
Minimum Clearance Required to Start: Top Secret
Employee Type: Regular
Percentage of Travel Required: Up to 25%
Type of Travel: Continental US
* * *
The Opportunity:
Join our unique team solving wide-ranging national security cyber and hardware challenges. Use your skills in interesting projects involving cyber reverse engineering and vulnerability research. Responsibilities include investigating embedded software/hardware devices, understanding digital communication implementations, and analyzing embedded binaries for protocol vulnerabilities. An ideal candidate can balance multiple projects in a fast-paced, interdisciplinary, R&D environment. The candidate excels at working effectively individually and on a team through their excellent communication skills and technical acumen.
Be part of a CACI department with an expanding range of programs focusing on Cyber Operations, where you get to grow on and between programs with peers who are dedicated to advancing national security. Participate in interesting team events where you get to engage with your co-workers and expand your career network. We have an engaging environment with a management team focused on growing your career and making you a part of our future. We offer bonus compensation plans that demonstrate our appreciation for your dedication to the program and being a part of our team. You'll get paid for cyber events and training, such as our Capture the Flag Events, Internal Research and Development opportunities, as well as prepaid courses to nationally recognized certification courses to grow your career.
Responsibilities:
- Analyze and reverse engineer software binaries and embedded firmware on traditional and embedded systems to identify functional behavior.
- Conduct code review and vulnerability analysis on software/firmware to identify potential weaknesses or access vectors.
- Perform protocol analysis of communication channels.
- Perform static and dynamic analysis of software and firmware using tools like IDA Pro, Ghidra, x64Dbd, GDB, and Sysinternals to research the behavior of binaries.
- Perform pattern analysis to identify critical information.
- Draft and deliver technical reports related to the scope, nature, and characteristics of the assessed software/firmware to both technical and non-technical audiences.
- Brief the customer and accurately capture in writing the findings of your analysis.
Qualifications:
Required:
- Active TS clearance with ability to obtain SCI
- Bachelors of Science degree in Computer Science, Software Engineering, Computer Engineering, or Electrical Engineering. Seven (7) years of relevant work experience may be substituted for a Master's degree.
- Experience analyzing and reverse engineering Assembly binaries (x86 and/or ARM, AVR)
- Experience with scripting languages such as Python and Unix Shell scripts
- Experience using virtualization technologies (VMware, VirtualBox, Docker)
- Experience using binary analysis tools such as IDA Pro, Ghidra, WinDbg, Binary Ninja
- Experience reverse engineering embedded firmware images
- Experience with user/system level emulation tools such as Qemu
Desired:
- Understanding of software development using C/C++ for Linux and/or Windows OS systems
- Active TS/SCI or TS/SCI Polygraph clearance
- Understanding of embedded firmware development for various microcontroller families
- Understanding of techniques for binary analysis to identify functionality and vulnerabilities in various applications, embedded firmware, systems and communications
- Understanding of memory management concepts (Heap, Stack, Virtual Memory)
- Familiarity with encryption & hashing methods and algorithms (3DES, AES, RSA, MD5, SHA, CRC, etc.)
- Background in ethical hacking and/or testing software vulnerabilities with a working knowledge of hacking tools and techniques such as memory corruption exploits, buffer overflows, rootkits, protocol poisoning, MetaSploit, nmap, etc.
- Reverse Engineering Certifications (e.g. GIAC Reverse Engineering Malware (GREM) )
- Cybersecurity certifications (e.g. OSCP, OSED, Security+)
What You Can Expect: A culture of integrity.At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.
An environment of trust.CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.
Pay Range:
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
The proposed salary range for this position is:
$113,200 - $237,800
CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
Never miss an opportunity! Create an alert based on the job you applied for.