Lead Vulnerability Researcher Overview • As a Lead Vulnerability Researcher, you will spearhead efforts to analyze and counteract malicious software threats. • Develop operationally critical cyber capabilities to enhance security measures and mitigate vulnerabilities effectively. • Collaborate with cross-functional teams to design, develop, and deploy advanced cybersecurity tools and techniques. • Utilize your expertise in reverse engineering and assembly language to identify and address security risks. • Engage in continuous learning to stay ahead of emerging threats and evolving cybersecurity technologies. • Contribute to the development of secure cryptographic primitives and defeat common anti-reverse engineering techniques. • Work on-site to ensure seamless collaboration and effective communication with stakeholders and team members. Lead Vulnerability Researcher Key Responsibilities & Duties • Analyze malicious software to identify vulnerabilities and develop countermeasures. • Design and implement tools for command and control, persistence, and networking. • Reverse engineer compiled programs using advanced debugging and decompiling tools. • Develop and defeat mitigations such as ASLR, DEP, and obfuscation techniques. • Utilize program analysis tools for control flow, program slicing, and taint tracing. • Implement secure cryptographic primitives and analyze embedded platforms. • Effectively communicate findings and strategies with customers and team members. • Leverage automated analysis tools such as fuzzers, emulation, and sandboxes. Lead Vulnerability Researcher Job Requirements • Bachelor of Science (BS) degree in a relevant field is required. • Minimum of 7 years of experience in cybersecurity, with 10 years preferred. • Proficiency in reverse engineering, assembly languages, and scripting languages like Python. • Experience with debuggers and decompilers such as gdb, Binja, and IDA Pro. • Knowledge of program analysis tools and techniques, including control flow and taint tracing. • Understanding of embedded platforms, file systems, and cryptographic primitives. • Ability to develop and defeat mitigations like ASLR and DEP effectively. • Strong communication skills to collaborate with customers and teammates.