Skip to content

Open nowPosted 56 days ago

Reverse Engineer Researcher

CMU137 open roles

Where
Pittsburgh PA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowReverse Engineer ResearcherCMU · Pittsburgh PA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CMU's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.1% of postings close within 7 days. Measured by our own scanner across the market. CMU postings stay open a median of 4 days.

Share of postings closed within
  1. 1.7%1 day
  2. 3.6%3 days
  3. 8.1%7 days
  4. 15.1%14 days
  5. 34.0%30 days
This job: posted 56 days ago

CMU median: 4 days open

The posting

About the role

The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Our core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time.

The CERT Division of the Software Engineering Institute (SEI) is seeking an applicant for the role of a Reverse Engineer Researcher for the Threat Analysis directorate. The SEI is a federally funded research and development center at Carnegie Mellon University.

What you’ll do

  • Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, work to identify and address emerging and complex threats, and effectively participate in the broader security community
  • Perform in-depth reverse engineering of malicious code, document and transition results in reports, presentations, and technical exchanges
  • Explore ways to use artificial intelligence to support of reverse engineering and apply reverse engineering practices to artificial intelligence systems
  • Design, prototype, and transition new analysis methods and tools
  • Identify and document emerging and complex active security threats
  • Participate in the broader security community through collaboration, papers, and presentations

Who you are

  • You have BS in Computer Science or related discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR PhD in the same fields with two (2) years of experience.
  • You enjoy working on emerging and complex malware analysis and reverse engineering problems.
  • You have an analytical mindset and deep curiosity about how software works.
  • You have the ability to balance rapid prototyping with maintainable tool development.
  • You have strong technical writing experience.
  • You recognize and deal appropriately with confidential and sensitive information.
  • You are able to handle continual shifting priorities.
  • You enjoy mentoring and training others as well as sharing knowledge.
  • You communicate effectively with technical and non-technical audiences.
  • You have a willingness to travel to various locations to support the SEI’s overall mission This includes sponsor sites, conferences, and offsite meetings on occasion. Moderate Travel (15%)
  • You will be subject to a background check and obtain and maintain an active Department of War security clearance

You have experience with or knowledge of

  • Reverse engineering software binaries for a variety of architectures, both at the user level and kernel level
  • Static analysis tools (e.g. IDA Pro, NSA Ghidra, Binary Ninja)
  • User-level and kernel-level debuggers (e.g. x32dbg, x64dbg, gdb, WinDbg)
  • Native programming languages (e.g. C/C++).
  • High-level programming languages (e.g. Java, Python, GoLang, etc.)
  • Software engineering and design concepts
  • Firmware and device driver development
  • Malware tradecraft and threat actor tactics, techniques, and procedures (TTPs)
  • Malware signature creation and use, independent of detection technology
  • Operating system concepts and internals and binary file formats (e.g. PE, ELF, Mach-O, etc.)
  • Internet Protocols and network analysis tools (e.g. Wireshark, netcat, etc.)
  • Compiler theory, cryptography, and malware deobfuscation techniques.
  • Mobile device development and reverse engineering
  • Malware sandboxes or instrumentation frameworks (e.g., Frida, QEMU, Unicorn Engine).
  • General understanding and experience in artificial intelligence and machine learning and using artificial intelligence to support reverse engineering and malware analysis

Why work here?

  • Join a world-class organization that has significant impact on software
  • Work with cutting edge technologies and experts to solve tough problems for the government and the nation
  • Get 8% monthly contribution for your retirement, without having to contribute yourself
  • Get tuition benefits to CMU and other institutions for you and your dependent children
  • Enjoy a healthy work/life balance with flexible work arrangements and paid parental and military leave
  • Get access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System
  • Enjoy annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies
  • Qualify for relocation assistance and so much more

Location

Arlington, VA, Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff – Regular

Full time/Part time

Full time

Pay Basis

Salary

More Information:

  • Please visit “Why Carnegie Mellon” to learn more about becoming part of an institution inspiring innovations that change the world.
  • Click here to view a listing of employee benefits
  • Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran.
  • Statement of Assurance
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CMU's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on CMU's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    CMU's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.