Reverse Engineer with Security Clearance

---

Job description

Reverse Engineer - Job Description Who We Are Kudu Dynamics is a 100% employee-owned company, forged out of a decade of experience in computer network operations and staffed with talent who have built, overseen, and enhanced capabilities throughout the entire USG arsenal. Our team of hackers, engineers, makers, and shakers have experience spanning centuries of research, development, and operations missions - across desktop, mobile, IoT, and embedded platforms. Kudu Dynamics is uniquely qualified to anticipate tomorrow's threats and build the next generation of capabilities. Full Job Description The Kudu Dynamics Aggressor team of security researchers and software engineers is actively developing an automated firmware vulnerability discovery tool for Internet of Things (IoT) devices. The Aggressor team has generated thousands of potential vulnerabilities and has hundreds of physical devices (IP cameras, wireless routers, etc.) ready for real-world exploit development. Our team is eager to bring on one to two Software Engineers who are ready to directly contribute in a reverse engineering, vulnerability research, system emulation, and exploit development role. Responsibilities Development of new microservices, primarily in Python, to automate the vulnerability discovery process Develop/refine system emulation of IoT devices Use the Aggressor system to generate new potential vulnerabilities from firmware images Reverse engineer commercial IoT devices to get access to firmware and hardware debugging connections Research CVEs and other freely available information to help inform your exploit development Create and demonstrate usable exploits across a variety of commercial IoT devices Work in an Agile Scrum development team to meet project objectives Minimum Qualifications A U.S. citizen with ability to hold a security clearance Bachelor's degree in Computer Science, Computer Engineering, or similar field of study Experience with one or more disassemblers (IDA, Binary Ninja, Ghidra, etc.) Experience with one or more assembly languages (x86, MIPS, ARM, etc.) Experience with software development and testing in Python and C/C++ Nice-to-have Qualifications Active Top Secret clearance with SCI eligibility Three or more years experience in a reverse engineering/vulnerability researcher role Experience with firmware and/or embedded systems reverse engineering Experience with one or more emulation frameworks (QEMU, Firmadyne, etc.) Experience with Docker and container orchestration (Nomad, Kubernetes, Docker Swarm, etc.) Benefits We Provide Equity at a company that is doing dynamic, fun, meaningful, and interesting work. A flexible work schedule, with the option to work remotely most days, if that's your style. Your own yearly discretionary budget to buy the things that make you happy. In addition to highly competitive salaries, we offer premium healthcare options, 401k matching, and an annual pass to a swim in the bonus pool. We also offer four weeks of paid time off and 11 federal holidays to utilize whenever you want throughout the year. Awesome, enthusiastic co-workers and a company culture that promotes a jerk- free environment. Rattle the windows with the company band, participate in board game or movie nights, and help balance out the scotch vs. bourbon ratio in the office. Kudu provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Pay Range: $145,000 - $200,000 per year

<!– job description page –>