Senior Cyber Software Engineer
STR
About the role
The Defensive Cyber Technologies (DCT) group at STR is seeking a Senior Cyber Software Engineer to develop software and technical capabilities that improve the security and resiliency of critical national defense systems. Our team hardens customer codebases, conducts cybersecurity assessments of operational software, and develops and applies first-of-its-kind cybersecurity tools to identify and remediate vulnerabilities before they affect mission-critical systems.
What you'll do:
Work as part of a high-functioning team to apply advanced software engineering principles to develop robust, resilient software solutions for national security missions
Perform comprehensive security assessments on operational software and mission-critical systems
Identify, validate, and remediate vulnerabilities
Design, build, and execute novel fuzzing campaigns to uncover security weaknesses
Develop static and dynamic analysis tools to detect, report, and remediate vulnerabilities in software systems
Communicate technical findings, risk, and remediation recommendations to engineering and customer stakeholders
Who you are:
This position requires an Active Secret or Top Secret security clearance, for which US citizenship is needed by the US Government.
Bachelors degree in Computer Science, or related field with a minimum 5 years of relevant professional experience (MS plus 3 years experience or PhD may be considered)
Strong proficiency in C or C++ and the ability to learn and work effectively in additional languages as needed
Strong systems programming foundation, including familiarity with OS internals, ABI/calling conventions, memory and process management, and assembly-level debugging
Experience working with compiler and build toolchains such as LLVM/Clang, GCC, and CMake.
Nice to have:
Experience with dynamic analysis and fuzzing tools, such as PIN, DynamoRio, and AFL++
Proficiency in Rust
Experience with container and virtualization technologies, such as Docker and QEMU
Familiarity with reverse engineering and binary analysis using tools such as Ghidra, IDA Pro, Binary Ninja, or objdump
Pay Information
Full-Time Salary Range: $138,000 - $190,000
The salary range listed is based on external market data. Offers are based on factors, such as but not limited to, the candidate’s experience, education, training, key skills/critical skills, security clearances, and prevailing market and business conditions.
STR is a growing technology company with locations near Boston, MA, Arlington, VA, near Dayton, OH, Melbourne, FL, Carlsbad, CA, Atlanta, GA, and Denver, CO. We specialize in advanced research and development for defense, intelligence, and national security in: cyber; next generation sensors, radar, sonar, communications, and electronic warfare; and artificial intelligence algorithms and analytics to make sense of the complexity that is exploding around us.
STR is committed to creating a collaborative learning environment that supports deep technical understanding and recognizes the contributions and achievements of all team members. Our work is challenging, and we go home at night knowing that we pushed the envelope of technology and made the world safer.
STR is not just any company. Our people, culture, and attitude along with their unique set of skills, experiences, and perspectives put us on a trajectory to change the world. We can't do it alone, though - we need fellow trailblazers. If you are one, join our team and help to keep our society safe! Visit us at www.str.us for more info.
STR is an equal opportunity employer. We are fully dedicated to hiring the most qualified candidate regardless of race, color, religion, sex (including gender identity, sexual orientation and pregnancy), marital status, national origin, age, veteran status, disability, genetic information or any other characteristic protected by federal, state or local laws.
If you need a reasonable accommodation for any portion of the employment process, email us at appassist@str.us and provide your contact info.
Pursuant to applicable federal law and regulations, positions at STR require employees to obtain national security clearances and satisfy the requirements for compliance with export control and other applicable laws.
Responsibilities
- Develop robust software solutions for national security missions.
- Assess operational software and mission-critical systems for security vulnerabilities.
- Identify, validate, and remediate vulnerabilities.
- Design and execute fuzzing campaigns to uncover security weaknesses.
- Develop static and dynamic analysis tools.
- Communicate technical findings, risks, and remediation recommendations to stakeholders.
Qualifications
- Bachelor's degree in Computer Science or a related field and at least 5 years of relevant professional experience; an MS plus 3 years or a PhD may be considered.
- Active Secret or Top Secret security clearance; US citizenship is required.
- Strong proficiency in C or C++ and ability to learn additional languages.
- Systems programming foundation, including OS internals, ABI and calling conventions, memory and process management, and assembly-level debugging.
- Experience with compiler and build toolchains such as LLVM/Clang, GCC, and CMake.
- Experience with dynamic analysis and fuzzing tools, Rust, container and virtualization technologies, or reverse engineering and binary analysis tools is a plus.
Skills mentioned
About STR
STR is driven to deliver impact. We take pride in formulating solutions to the nation's newest, hardest problems through sustained innovation and application of technology. As the world becomes increasingly inter-connected, our model for keeping society safe must evolve. STR is leading the way, with cutting edge cybersecurity tools that wrangle complexity, analytics toolsets that drive sensemaking to the user, sensing that exploits the intricacies of physics, and systems that deliver capability to make us safer. Our people and our values drive us. We are an employee-owned company that seeks lasting, long-term contribution and not short-term returns. We strive to leave the world a little better and safer each day, both through our work and our interactions with each other. We believe that by coming together and working together, we can achieve greater impact than we ever could alone.