Principal Cyber Security Engineer

Riverside OverviewRiverside Research is an independent National Security Nonprofit dedicated to research and development in the national interest. We provide high-end technical services, research and development, and prototype solutions to some of the country’s most challenging technical problems.    All Riverside Research opportunities require U.S. Citizenship.   Position Overview

The Riverside Research Engineering and Support Solutions (ESS) directorate conducts Research and Development (R&D) of cyber-physical attacks against embedded systems. As a Principal Cyber Security Research Engineer, your work directly supports the government customer and Riverside leadership to develop and execute R&D strategy for an Air Force-level program impacting   U.S. National Security priorities. You will collaborate with a multi-disciplinary team of research engineers and scientists on a range of microelectronics security research projects. You’ll work directly with a team of embedded system security research subject matter experts (SME), the senior Principal Investigator, and Program Manager to support various project-specific research projects and deliverables providing value to our customers.

The position is in Beavercreek OH and requires a Top Secret security clearance. Remote work is not available for this position. Travel is not expected to exceed 8 trips per year.

All Riverside Research opportunities require US citizenship.

Responsibilities

• Directly support the government customer's research program strategy development and execution
• Develop plans, solutions, and strategies for R&D challenges that address current and future program concepts and products
• Serve as the Principal Embedded Systems Cybersecurity subject matter expert to the government and research team
• Collaborate with national-level hardware security research working-groups and steering committees
• Support and help lead government customer priorities in technical working groups, technical exchange meetings, and conferences
• Perform technical work as required, including software tool development, reverse engineering tasks, and similar technical activities
• Study and assess software-based threats to embedded systems published in scientific journals, hacking community postings, and conference presentations
• Stay current on threats, vulnerabilities, and countermeasures—relevant TTPs for embedded security—and innovate new protective technologies through cutting-edge R&D
• Document findings in technical reports and presentations
• Provide technical mentorship for junior researchers within your area of expertise

QualificationsRequired Qualifications

• Experience with supporting government contracts
• Experience planning, developing, and executing R&D program strategy
• Strong understanding of hardware security attacks, hardware exploitation, or side-channel analysis
• Extensive experience reverse engineering operating systems via embedded Linux (e.g. PetaLinux, Yocto, Buildroot), RTOS (e.g. VxWorks, Integrity), and bare-metal systems (e.g. firmware)
• Experience with a disassembler for vulnerability research (Ghira, IDA Pro, BinaryNinja)
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with debuggers like (WinDbg, HyperDbg, GDB/KGDB/KDB, TRACE32, and OpenOCD)
• Strong familiarity with published vulnerability databases (CVE, etc.)
• Experience with embedded processors (RISC-V, ARM, MicroBlaze, Nios, etc.)
• Experience with using simulation/emulation, and hardware-in-loop (HIL) to assist with debugging and reverse engineering
• Experience presenting technical material to both technical and non-technical audiences
• Willing to work in a secure US Government facility
• Bachelor’s degree in Computer Engineering, Computer Science or related technical area with 15 years relevant experience, or a related technical Master’s degree with 12 years relevant experience, or a PhD in a related field with 8 years relevant experience
• Top Secret security clearance and all required program access approvals

Desired Qualifications

• Embedded software development experience
• Experience leading technical teams to successful product delivery
• Familiarity with compiled languages like C/C++ and Rust
• Knowledge of formal analysis, static analysis, or related cyber research areas
• Previous experience working in a secure US Government facility desired

Global Comp$165,000 - $245,000 This represents the typical compensation range for this position based on experience, location and other factors. Closing Statement  Riverside Research Institute is a not-for-profit, technology-oriented defense company, where service to our customers and support of our staff is our overall mission. Riverside is an affirmative action-equal opportunity employer and complies with all applicable federal, state, and local laws regarding recruitment and hiring.  Riverside offers comprehensive compensation and benefit packages to our employees. Riverside bases its employment decisions solely on technical experience, qualifications and other job-related criteria related to our organizational purpose as a not-for-profit company, and without regard to race, color, religion, age, sex marital status, sexual orientation, national origin, physical or mental disability, veteran’s status or any other status legally protected by applicable federal, state, and local law.