Cyber Reverse Engineer

Description

The team works on national security cyber and hardware challenges in a fast-paced, interdisciplinary R&D setting, with a focus on cyber reverse engineering and vulnerability research.

The work covers investigating embedded software and hardware devices, understanding digital communication implementations, and analyzing embedded binaries for protocol vulnerabilities. You will balance several projects at once, working both alone and in a team.

The role sits in a CACI department with a growing set of Cyber Operations programs, where you can grow on and between programs alongside colleagues focused on national security. The team holds social events that help you build your professional network, and management is focused on your career growth. Bonus compensation plans are available. You are paid for cyber events and training, including Capture the Flag events and internal R&D work, and courses toward nationally recognized certifications are prepaid.

This position depends on funding and may not be filled right away. It reflects roles CACI regularly has open, and applicants may also be considered for other CACI positions.

Responsibilities

• Reverse engineer software binaries and embedded firmware on traditional and embedded systems to determine how they behave.
• Review code and analyze software and firmware for vulnerabilities, weaknesses, and possible access routes.
• Analyze protocols used over communication channels.
• Run static and dynamic analysis on software and firmware with tools such as IDA Pro, Ghidra, x64Dbg, GDB, and Sysinternals to study binary behavior.
• Find critical information through pattern analysis.
• Write and present technical reports on the scope, nature, and characteristics of the assessed software and firmware for both technical and non-technical readers.
• Brief the customer and document your analysis findings accurately in writing.

Requirements

• Required: An active Top Secret clearance with the ability to obtain SCI.
• Required: A Bachelor of Science in Computer Science, Software Engineering, Computer Engineering, or Electrical Engineering.
• Required: 5+ years of relevant work experience.
• Required: Experience analyzing and reverse engineering assembly binaries for x86, ARM, and/or AVR.
• Required: Experience with scripting in Python and Unix shell.
• Required: Experience with virtualization tools such as VMware, VirtualBox, and Docker.
• Required: Experience with binary analysis tools such as IDA Pro, Ghidra, WinDbg, and Binary Ninja.
• Required: Experience reverse engineering embedded firmware images.
• Required: Experience with user and system level emulation tools such as Qemu.
• Desired: Understanding of C/C++ software development for Linux and/or Windows.
• Desired: An active TS/SCI or TS/SCI Polygraph clearance.
• Desired: Understanding of embedded firmware development across various microcontroller families.
• Desired: Understanding of binary analysis techniques for finding functionality and vulnerabilities in applications, embedded firmware, systems, and communications.
• Desired: Understanding of memory management concepts such as heap, stack, and virtual memory.
• Desired: Familiarity with encryption and hashing methods and algorithms such as 3DES, AES, RSA, MD5, SHA, and CRC.
• Desired: Background in ethical hacking or software vulnerability testing, with working knowledge of hacking tools and techniques such as memory corruption exploits, buffer overflows, rootkits, protocol poisoning, Metasploit, and nmap.
• Desired: Reverse engineering certifications such as GIAC Reverse Engineering Malware (GREM).
• Desired: Cybersecurity certifications such as OSCP, OSED, or Security+.

Conditions

Full-time, regular position with up to 10% local travel.

Minimum clearance to start: TS/SCI.

Salary depends on factors including location, Federal Government contract labor categories and wage rates, prior experience, specific skills, education, and certifications. The proposed salary range is $79,400 - $162,700.

CACI offers flexibility to balance work and personal life, along with competitive pay, benefits, and learning and development. Benefits include healthcare, wellness, financial, retirement, family support, continuing education, and time off.

Benefits

• Flexible time off, so you can take the time you need.
• Access to learning resources for career growth.
• Bonus compensation plans.
• Paid time for cyber events and training, including Capture the Flag events and internal R&D, plus prepaid nationally recognized certification courses.