Software Vulnerability Researcher

Aspen Consulting Group is seeking an individual with academic or industry experience to lead research activities in the discovery of software vulnerabilities. The candidate will perform

research and analysis of security vulnerabilities associated with a wide variety of architectures

to include x86, MIPS, ARM, amongst others, with emphasis on embedded software applications.

Demonstrated experience with reverse engineering tools, such as IDA Pro, the use of fuzzing

techniques and tools, and understanding dynamic, symbolic and concolic software analysis are

essential. The candidate must possess an expert command of C/C++ programming, with knowledge of assembly language for multiple architectures a definite plus.

• BS/MS degree in Computer Engineering, Computer Science, Electrical Engineering, or a related

field. Candidates currently enrolled in an MS accredited degree program relevant to this position

will be considered. Possessing a PhD degree or being a candidate for PhD is preferred but not

required.

• Experience with debuggers, code compilers and linkers, source code extractors, and disassemblers for Windows, Linux, Android, Apple OS X and IOS platforms.

• Experience with software reverse engineering tools and methods.

• Experience with emulation such as QEMU, and code intermediate representation (IR).

• Ability to prepare technical reports and papers and to present findings to senior management

and at technical conferences.

The successful candidate will assume the lead role in discovering vulnerabilities within identified applications in support of a research team. He/she will collaborate in identifying software patches and in the analysis of potential exploits which could have resulted from the discovered vulnerabilities. In addition, the candidate will be integral to our current research efforts for automated vulnerability discovery with the application of Machine Learning (ML) techniques.

Travel Requirements: 10% - 25% travel.