Principal Reverse Engineering, Vulnerability Research Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

📚 Research Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Clarity Innovations, Inc.

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 1996

💼 Consulting

📣 Marketing

📚 Education

Consulting • Marketing • Education

Clarity Innovations, Inc. is a trusted partner for educational technology (edtech) strategy, content, design, and engineering, serving clients in the K-12 education space for nearly thirty years. They specialize in creating innovative solutions tailored to meet the unique needs of their partners, focusing on quality product development and user-friendly design. With a dedicated team of experts, Clarity Innovations collaborates closely with clients to enhance their educational offerings, ensuring successful project outcomes and impactful learning experiences.

📋 Description

• Perform vulnerability research and reverse engineering for customer tasks • Perform static and dynamic analysis using research tools such as disassemblers, debuggers, and fuzzers • Perform exploit development leveraging discovered vulnerabilities • Communicate security research findings internally and, when and where appropriate, externally • Mentor fellow security researchers • Break down and fully understand how different systems function • Operate through the early phases of vulnerability research projects and carry them through multiple phases and iterations

🎯 Requirements

• Must be able to obtain and maintain a TS/SCI security clearance (note, only US Citizens are eligible for security clearances) • Bachelor's degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline and six years of professional experience • Experience participating in CTFs, hackathons, or other cyber competitions • Experience with Ghidra, Binary Ninja, IDA or other reverse engineering/disassembler tools • Experience working in Linux fundamentals (understanding sockets, file descriptors, networking, iptables, file systems, kernel, etc.) • Ability to read and write C and assembly languages as needed (ARM, MIPS, x86_64) • Programming fundamentals; particularly with networking, data structures, and data models • Understanding of exploitation techniques such as leveraging arbitrary read-write primitives, shellcoding, and return-oriented programming / jump-oriented programming • Proven track record of exploit creation targeting Android operating systems and Chrome web browsers • Preferred: Currently possess a Top Secret security clearance • Preferred: OS and kernel reverse engineering • Preferred: Understanding of fuzzers such as AFL++ or libfuzzer • Preferred: Understanding of common exploit mitigation mechanisms such as SELinux, Seccomp, ASLR, and CFI • Preferred: Strong understanding of dynamic analysis with gdb/gdbserver and similar tools • Preferred: Basic understanding of processor tool chains and the Android NDK • Preferred: Understanding of emulation using Qemu or Unicorn for running code in a non-native environment • Preferred: Experience identifying 0-days and vulnerabilities