Lead Software Security Researcher

View full description

Requirements:

• Proven experience working in security research or software analysis
• Experience in implementing and utilizing static-analysis and dynamic-analysis tools.
• Experience with disassemblers and other reverse-engineering tools
• Understanding of common vulnerability & software weakness classes
• Programming skills in Python, and an affinity for automated testing
• Experience working on small, fast-paced, teams
• Strong communication and collaboration skills

Responsibilities:

• Lead projects to develop proofs of concept and implement new static analysis methods for the Finite State Software Testing Pipeline,
• Lead efforts to identify & prioritize security risks (CVEs; CWEs; network, device, and configuration issues; key and credential analysis; etc). You will build tools (or leverage existing tools) to identify these risks in binary software.
• Develop techniques for software composition analysis focused on binary analysis for both statically and dynamically compiled software.
• Gain familiarity with all parts of the analysis pipeline to effectively contribute as needed in all analysis domains
• Be responsible for pragmatic technical decision-making to ensure we're delivering high quality software on a reasonable schedule
• Uphold our core values of transparency, results, accountability, customer dedication, and courage
• Champion our mission to protect our connected world