Commercial Drone Reverse Engineer / Vulnerability Researcher

Job description

Job responsibilities

• Conducting vulnerability research and reverse engineering of commercial drones, embedded firmware, flight controllers, and supporting software
• Identifying, analyzing, and validating software and hardware vulnerabilities, including developing proof-of-concept exploits
• Performing static and dynamic analysis of embedded firmware, binaries, and communications protocols
• Investigating command and control, telemetry, navigation, and other interfaces to identify security-relevant behaviors and attack surfaces
• Discovering interesting edge cases, undocumented functionality, and exploitable conditions (including designing experiments specifically targeted at teasing these out)
• Designing and assembling hardware and software test harnesses for lab-based experimentation, debugging, and vulnerability validation
• Developing and adapting tools for firmware analysis, fuzzing, debugging, instrumentation, and automated vulnerability discovery
• Researching system security mechanisms, including authentication, encryption, secure boot, firmware updates, and hardware protections

Job requirements

• Active TS/SCI security clearance
• Ability to work onsite at Aberdeen Proving Ground, Maryland
• Degree in computer science, computer engineering, electrical engineering, or equivalent hands-on experience
• Demonstrated experience with software or firmware reverse engineering, particularly embedded systems
• Experience identifying, analyzing, and validating software vulnerabilities, including developing proof-of-concept exploits
• Strong programming and scripting experience in Python and/or C/C++
• Experience with reverse engineering and debugging tools such as Ghidra, IDA Pro, Binary Ninja, GDB, or equivalent
• Familiarity with embedded processor architectures, assembly language, memory management, and low-level software analysis