Job Title: Lead, Security Research Engineer
Job Code: 19668
Job Location: Washington, DC
Job Description:
Finding vulnerabilities in ubiquitous Internet-deployed software and/or popular devices’ software or firmware.
Constructing exploits for vulnerabilities discovered by you or other research staff.
Research & development on security technologies in such fields as exploitation, bug-finding, reverse engineering and static analysis.
Working with and for officers, employees or contractors of the company.
Regular interaction with managers to field queries and questions.
Take an active role in cross-team projects when needed.
Qualifications:
Bachelor’s Degree and minimum 9 years of prior relevant experience. Graduate Degree and a minimum of 7 years of prior related experience. In lieu of a degree, minimum of 13 years of prior related experience.
Preferred Additional Skills:
Experience performing vulnerability research and/or exploit development.
Experience with static and dynamic binary analysis.
Experience with iOS, Android, Windows, Linux, or embedded systems kernel, user land, and internals or browser internals.
Experience with common tools in security research (e.g. IdaPro, Ghidra, Radare, Binary Ninja, AFL, SysInternals, GDB, WinDBG, etc).
Experience with common programming languages (e.g. C/C++, Python, Swift, etc).
Experience with common architectures (e.g. x86/64, ARM, AARCH64, MIPS, PowerPC, TILEGX, etc).
Experience with modern security system features, exploit mitigations, and evasion techniques (e.g. defeating ASLR, DEP, Control Flow Guard, ROP, Security Product/AV Evasion, etc).
Experience with a wide range of modern exploitation concepts and techniques.
Service in the US/CA/UK/AU/NZ Intelligence Community or US/CA/UK/AU/NZ Military working in cyber operations.
Evidence of a successful track record in vulnerability research through CVEs.
Experience teaching and mentoring junior vulnerability researchers.
In compliance with pay transparency requirements, the salary range for this role in Washington DC is $132,000 - $245,000. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the applicability of collective bargaining agreements.
#J-18808-Ljbffr
Job Code: 19668
Job Location: Washington, DC
Job Description:
Finding vulnerabilities in ubiquitous Internet-deployed software and/or popular devices’ software or firmware.
Constructing exploits for vulnerabilities discovered by you or other research staff.
Research & development on security technologies in such fields as exploitation, bug-finding, reverse engineering and static analysis.
Working with and for officers, employees or contractors of the company.
Regular interaction with managers to field queries and questions.
Take an active role in cross-team projects when needed.
Qualifications:
Bachelor’s Degree and minimum 9 years of prior relevant experience. Graduate Degree and a minimum of 7 years of prior related experience. In lieu of a degree, minimum of 13 years of prior related experience.
Preferred Additional Skills:
Experience performing vulnerability research and/or exploit development.
Experience with static and dynamic binary analysis.
Experience with iOS, Android, Windows, Linux, or embedded systems kernel, user land, and internals or browser internals.
Experience with common tools in security research (e.g. IdaPro, Ghidra, Radare, Binary Ninja, AFL, SysInternals, GDB, WinDBG, etc).
Experience with common programming languages (e.g. C/C++, Python, Swift, etc).
Experience with common architectures (e.g. x86/64, ARM, AARCH64, MIPS, PowerPC, TILEGX, etc).
Experience with modern security system features, exploit mitigations, and evasion techniques (e.g. defeating ASLR, DEP, Control Flow Guard, ROP, Security Product/AV Evasion, etc).
Experience with a wide range of modern exploitation concepts and techniques.
Service in the US/CA/UK/AU/NZ Intelligence Community or US/CA/UK/AU/NZ Military working in cyber operations.
Evidence of a successful track record in vulnerability research through CVEs.
Experience teaching and mentoring junior vulnerability researchers.
In compliance with pay transparency requirements, the salary range for this role in Washington DC is $132,000 - $245,000. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the applicability of collective bargaining agreements.
#J-18808-Ljbffr
