Apply on Employer Site

ARSIEM Corporation · 5 months ago

Software Application Researcher 4

Annapolis Junction, MD

Full-time

Onsite

Senior Level, Lead/Staff

$250K/yr - $300K/yr

16+ years exp

ARSIEM Corporation is dedicated to providing exceptional support to government clients across the United States. They are seeking a Software Application Researcher 4 to identify software flaws, demonstrate vulnerability research techniques, and produce detailed documentation while collaborating with a team of researchers and developers.

Cyber SecurityEmbedded SoftwareEnterprise ApplicationsSoftwareSoftware Engineering

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Identify flaws in software and software architecture design

Demonstrate the latest techniques and best practices in vulnerability research

Produce detailed documentation of research

Write code in C, Python, and Assembly to demonstrate the ability to control the flaws

Demonstrate understanding of distributed architectures and protocol analysis between disparate components

Qualification

C programmingPythonAssembly programmingSoftware-as-a-ServiceDebugging toolsBinary analysisNetwork programmingSelf-driven researchTeam collaborationMotivated to learn

Required

Understanding and experience with Software-as-a-Service architectures

Understanding of OS Internals (any major OS)

Experience reading and writing assembly (x86/x64, ARM, MIPS, etc.)

Extensive experience with debuggers (WinDBG, GDB, ADB, BDI, etc.)

Experience with dynamic and static binary analysis, fuzzing techniques, and source code auditing

Strong C, Python, and ASM development experience

Demonstrated ability to self-drive research tasking

Motivated to learn complex systems

Working as a team with researchers and developers

Minimum sixteen (16) years of experience in computer science, information systems, or network engineering, or a Bachelor's degree plus twelve (12) years of experience, a Master's degree plus ten (10) years of experience, or a Ph.D. plus eight (8) years of experience

Minimum twelve (12) years of experience programming in Assembly, C, C++, Java, Perl, or Python

Minimum twelve (12) years of experience developing in one (1) or more of the following: Windows applications using Visual Studio or .NET environments; Unix/Linux applications using make files or comparable build environments

Minimum ten (10) years of experience with programming CNO tools

Minimum five (5) years of experience leading, managing, and or supervising teams in support of CNO capability development

Minimum four (4) years of experience in programming techniques to evade host and or network-based intrusion detection systems

Minimum four (4) years of experience in network sockets programming, including developing packet-level programs; expert packet-level understanding of IP, TCP, and application-level protocols

Expert ability in UNIX and or low-level Windows internals, including but not limited to the OS runtime linker/loader, object file formats (e.g., PE, COFF, ELF), file system internals (e.g., NTFS, ext2, btrfs), OS-specific mandatory and discretionary access control mechanisms, and or process and thread APIs and data structures

This position requires an active TS/SCI with a polygraph

You must be a U.S. citizen for consideration