Junior Research Scientist - Security Engineering

Riverside Research is an independent National Security Nonprofit dedicated to research and development in the national interest. We provide high-end technical services, research and development, and prototype solutions to some of the country’s most challenging technical problems.    All Riverside Research opportunities require U.S. Citizenship.

The computer systems we interact with on a daily basis are inherently flawed. By nature, many systems contain bugs and vulnerabilities. What if we could architect systems that think differently? The Secure and Resilient Systems group at Riverside Research aims to do just that. By leveraging secure input handling, model-based systems engineering (MBSE), and open architectures, we aim to ensure systems are secure by design, eliminating entire classes of vulnerabilities.

 

Riverside Research is seeking a dynamic and growth-focused junior-level research scientist to support research and development of bleeding-edge engineering security technologies. As a key member of our Secure and Resilient Systems team, the research scientist will interface with government research organizations (e.g. DARPA, IARPA, service labs, etc.), work on existing R&D contracts, and develop bleeding-edge technologies for transition to the warfighter. The research scientist will interface with team members across Riverside Research locations.

 

The research scientist will contribute to a diverse team responsible for developing security technologies in a variety of DoD systems. They will get hands-on experience working towards and developing secure parsers, MBSE artifacts and tools, and other technologies in the interest of DoD partners. They will develop software and systems that use new and existing technologies in areas that these technologies may have never been applied to. They will also contribute to technical writing in their research area.

 

The junior research scientist should have hands on experience in C/C++ and Python, as well as a strong understanding of the pitfalls of improper input handling. They should be able to think creatively to express why vulnerabilities such as Heartbleed can be classified as parser vulnerabilities. The research scientist should have experience working with one or more of the following: network protocols, MBSE tools, secure input handling, and open architectures.

• →Help the group design innovative parser and data protocol capabilities
• →Assist in utilizing created and existing tools for DoD use cases
• →Build new tools and/or capabilities in languages like C/C++, Python, etc.
• →Contribute to whitepapers, proposals, and/or publish papers that document innovative work performed
• →Collaborate with team members on debugging programs, designing systems, reviewing papers, etc.
• →Participate in relevant internal and customer meetings

Required Qualifications:

• A deep technical understanding of cybersecurity problems and solutions
• Prior experience with memory safety vulnerabilities
• Proficiency in programming languages C/C++ and Python
• Experience with version control (Git)
• Knowledge on data format construction and an interest in exploring what makes a secure data format
• Knowledge of networking protocols
• Self-driven, strong analytic, inferencing, critical thinking, and creative problem-solving skills
• Able to obtain a clearance as needed

Desired Qualifications:

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or Cybersecurity and 0-2 years of relevant experience
• Experience with parser design/development
• Experience with MBSE tools
• Healthy balance between technical orientation and business acumen
• Ability to operate independently with limited supervision and feedback, and establish a solid working relationship with technical staff and peers in the group and across Riverside Research
• Superior written and verbal communication skills

$60,000 - $85,000 This represents the typical compensation range for this position based on experience, location and other factors.

Riverside Research Institute is a not-for-profit, technology-oriented defense company, where service to our customers and support of our staff is our overall mission. Riverside is an affirmative action-equal opportunity employer and complies with all applicable federal, state, and local laws regarding recruitment and hiring.  Riverside offers comprehensive compensation and benefit packages to our employees.   Riverside bases its employment decisions solely on technical experience, qualifications and other job-related criteria related to our organizational purpose as a not-for-profit company, and without regard to race, color, religion, age, sex marital status, sexual orientation, national origin, physical or mental disability, veteran’s status or any other status legally protected by applicable federal, state, and local law.