Hybrid Senior Cyber Tool and Capability Developer

at Draper

• Job title: Senior Cyber Tool and Capability Developer
• Job type: Full Time
• Experience level: Senior
• Salary: $82,300 - $205,750 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Assembly, Cyber Security, Linux, Python, RTOS, Rust
• Location requirements: Hybrid, Cambridge, United States

About the role

• Senior Cyber Software Engineer developing cybersecurity solutions and tools for US national interests. Working in a collaborative, multidisciplinary team on complex challenges in various domains.

Responsibilities

• Assess hardware and software for security vulnerabilities using a breadth of technologies and techniques.
• Develop software that meets behavior and security requirements for tailored applications.
• Integrate software capabilities with other tasks or groups to improve performance or behavior requirements.
• Create new tools and systems to detect and exploit vulnerabilities and system weaknesses.
• Document nominal application and system functionality, in addition to implemented changes.
• Drive solutions to complex problems with limited direction – contribute to requirements development, propose ways forward, and adapt appropriately to changes in requirements.
• Provides insight and suggest design modifications based on analysis outcomes, and to apply analysis techniques across a range of technical disciplines.
• Identifies program/system-level technical risks and develop and execute mitigation strategies.
• Actively mentor less experienced engineers and provide thoughtful, constructive feedback.
• Performs other related duties as assigned.

Requirements

• Requires a bachelor's in computer science, computer engineering, or related field.
• 5-10 years experience in Cybersecurity or related field is required.
• Proficiency in developing custom low-level software tools and integrating those tools into complex systems.
• Proficiency with contemporary program analysis methodologies and techniques (static and dynamic).
• Relevant tools include Ghidra, Ida, Binary Ninja, Radare, Angr, debuggers (GDB, winDBG), emulation tools (Qemu), fuzzers (AFL++), etc.
• Experience with techniques that prevent reverse engineering and employ obfuscation or diversification.
• Proven background in researching and exploiting software vulnerabilities.
• Knowledge of secure coding practices and mitigation techniques against software attack vectors.
• Proficient using programming languages and their build systems such as: C, C++, Python, GoLang, Rust.
• Experience in compiler toolchain development such as building custom LLVM passes.
• Experience with leveraging the different stages of compilation i.e. intermediate representation.
• Experience in building high-quality code and helping others to meet those same coding standards.
• Proficiency with the core workings of operating systems (user mode, kernel mode, boot processes), especially in Windows, GNU/Linux, or RTOS contexts.
• Experience leveraging a variety of computing architectures and their associated assembly languages (e.g. x86, ARM, RISCV, etc.).
• Past experience in task leadership.
• Able to task delegate and plan individual task timelines.
• Effective using different communication styles depending on team needs.
• Experience communicating during difficult situations.
• Experience with presenting technical concepts to both technical and non-technical audiences.
• Experience participating in proposal writing and business winning.

Benefits

• Workplace flexibility
• Employee clubs ranging from photography to yoga
• Health and finance workshops
• Off site social events
• Discounts to local museums and cultural activities