The Riverside Research Engineering and Support Solutions (ESS) directorate conducts Research and Development (R&D) of cyber-physical attacks against embedded systems. As a Principal Cyber Security Research Engineer, you work on significant and unique research and development challenges which support the government customer and Riverside program leadership to develop and execute R&D strategy for an Air Force-level program impacting U.S. National Security priorities. You will collaborate with and lead a multi-disciplinary team of research engineers and scientists on a range of microelectronics security research projects. You’ll work directly with a team of embedded system security research subject matter experts (SME), the Principal Investigator, and a community of National-level SMEs to support various project-specific research projects and deliverables solving the technical problems our customer requires. The position is in Beavercreek OH and requires security clearance. Remote work is not available for this position. Travel is not expected to exceed 4-6 trips per year.
All Riverside Research opportunities require US citizenship.
Responsibilities- Directly support the government customer's research program strategy development and execution
- Develop plans, solutions, and strategies for R&D challenges that address current and future program concepts and products
- Serve as the principal embedded systems cybersecurity advisor to the government customer and research team
- Collaborate with national-level hardware security research working-groups and steering committees
- Support and help lead government customer priorities in technical working groups, technical exchange meetings, and conferences
- Perform technical work as required, including software tool development, reverse engineering tasks, and similar technical activities
- Study and assess software-based threats to embedded systems published in scientific journals, hacking community postings, and conference presentations
- Stay current on threats, vulnerabilities, and countermeasures—relevant TTPs for embedded security—and innovate new protective technologies through cutting-edge R&D
- Document findings in technical reports and presentations
- Provide technical mentorship for junior researchers within your area of expertise
- Bachelor’s degree in Computer Engineering, Computer Science or related technical area with 12 years relevant experience, or a related technical Master’s degree with 8 years relevant experience, or a PhD in a related field with 5 years relevant experience
- Secret clearance required to start, but must be able obtain Top Secret security clearance and all required program access approvals
- Willing to work in a secure US Government facility
- Experience with supporting government contracts
- Experience planning, developing, and executing R&D program strategy
- Strong understanding of hardware security attacks, hardware exploitation, or side-channel analysis
- Extensive experience reverse engineering operating systems via embedded Linux (e.g. PetaLinux, Yocto, Buildroot), RTOS (e.g. VxWorks, Integrity), and bare-metal systems (e.g. firmware)
- Experience with a disassembler for vulnerability research (Ghira, IDA Pro, BinaryNinja)
- Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
- Experience with debuggers like (WinDbg, HyperDbg, GDB/KGDB/KDB, TRACE32, and OpenOCD)
- Strong familiarity with published vulnerability databases (CVE, etc.)
- Experience with embedded processors (RISC-V, ARM, MicroBlaze, Nios, etc.)
- Experience with using simulation/emulation, and hardware-in-loop (HIL) to assist with debugging and reverse engineering
- Experience presenting technical material to both technical and non-technical audiences
- Embedded software development experience
- Experience leading technical teams to successful product delivery
- Familiarity with compiled languages like C/C++ and Rust
- Knowledge of formal analysis, static analysis, or related cyber research areas
- Previous experience working in a secure US Government facility desired
- Active DoD Top Secret (TS) or equivalent US Government security clearance; SCI caveat is highly desired
Global Comp$165,000-$205,000 This represents the typical compensation range for this position based on experience, location and other factors. Closing Statement Riverside Research Institute is a not-for-profit, technology-oriented defense company, where service to our customers and support of our staff is our overall mission. Riverside is an affirmative action-equal opportunity employer and complies with all applicable federal, state, and local laws regarding recruitment and hiring. Riverside offers comprehensive compensation and benefit packages to our employees. Riverside bases its employment decisions solely on technical experience, qualifications and other job-related criteria related to our organizational purpose as a not-for-profit company, and without regard to race, color, religion, age, sex marital status, sexual orientation, national origin, physical or mental disability, veteran’s status or any other status legally protected by applicable federal, state, and local law.
Skills Required
- Bachelor’s degree in Computer Engineering, Computer Science, or a related technical field with 12 years of relevant experience; or a related technical master’s degree with 8 years of relevant experience; or a PhD in a related field with 5 years of relevant experience.
- Secret security clearance required to start and ability to obtain a Top Secret security clearance and required program access approvals.
- U.S. citizenship.
- Willingness to work in a secure U.S. Government facility.
- Experience supporting government contracts.
- Experience planning, developing, and executing R&D program strategy.
- Strong understanding of hardware security attacks, hardware exploitation, or side-channel analysis.
- Extensive experience reverse engineering operating systems using embedded Linux, RTOS, and bare-metal systems.
- Experience with disassemblers such as Ghidra, IDA Pro, or Binary Ninja.
- Experience with one or more assembly languages, including x86, x64, ARM, MIPS, or PowerPC.
- Experience with debuggers such as WinDbg, HyperDbg, GDB, KGDB, KDB, TRACE32, or OpenOCD.
- Strong familiarity with vulnerability databases such as CVE.
- Experience with embedded processors such as RISC-V, ARM, MicroBlaze, or Nios.
- Experience using simulation, emulation, and hardware-in-the-loop techniques for debugging and reverse engineering.
- Experience presenting technical material to technical and non-technical audiences.
- Embedded software development experience.
- Experience leading technical teams to successful product delivery.
- Familiarity with compiled languages such as C, C++, and Rust.
- Knowledge of formal analysis, static analysis, or related cyber research areas.
- Previous experience working in a secure U.S. Government facility.
- Active DoD Top Secret or equivalent U.S. Government security clearance; SCI eligibility is highly desired.
What We Do
Founded in 1967, Riverside Research is a not-for-profit organization chartered to advance scientific research for the benefit of the US government and in the public interest. Through our open innovation concept, we invest in multi-disciplinary research and development and encourage collaboration to accelerate innovation and advance science. Riverside Research conducts independent research in machine learning, trusted systems, optics and photonics, electromagnetics, plasma physics, radio frequency systems, and biomedical engineering. We move science from the laboratory to the field by building teams of recognized experts who deliver effective, high-value solutions and services to our customers. From public service to national security, we aspire to be a valued partner through our unwavering commitment to innovative and mission-focused solutions.
