Vulnerability Researcher

• Research cutting edge techniques and technologies for system exploitation

• Leverage expertise in reverse engineering, vulnerability research, and software development to address established needs and investigate solutions to emerging requirements

• Apply software engineering best practices to create proof-of-concept tools and configure test environments to perform demonstrations to sponsors and partners

• Assist the Cyberspace Operations Research Department Head in maintaining relationships with sponsors through on-site technical discussions, preparation and presentation of technical materials, and project-related correspondence

• Provide process enhancement for technical functionality evaluation, vulnerability analyses, cyberspace operations engineering, and penetration testing projects

• Apply project management principles and methods to the leadership of tasks or projects

• Provide guidance to lower-level engineers to foster professional growth

• →

  Understand broad strategic objectives and contribute to them; nurture and maintain relationships with major customers/grantors of external research and development grant funding

• →

  Identify grant/project follow-on work and persuade customers/grantors to fund; impact customer decisions and strategies

• →

  Initiate new project concepts and seek funding; develop technical proposals and make presentations to customers/grant sponsors

• →

  Mentor department staff in the development technical, project, and business development skills

• Documented application of reverse engineering and vulnerability testing tools (e.g. Ghidra/IDA, Kali Linux, Angr/AFL++, QEMU/Unicorn, etc)

• Reverse engineering, vulnerability research, malware analysis, and/or CNO tool development

• Computer networking fundamentals, Windows and *NIX operating systems, X86(64) and ARM or MIPS architectures

• Cyber operations architecture and software engineering practices

• Software programming, programming languages, and development environments (to include at a minimum C, Java, or Python)

• Ability to express technical information clearly and concisely in documents and presentations for senior leaders to successfully comprehend and leverage for decision making

• Active government security clearance at TS/SCI level with eligibility for special accesses

• Cybersecurity exploit development and test environment configuration

• Cybersecurity penetration testing / cybersecurity Red Team testing / white hat hacking

• Military cyberspace operations or computer network operations

• Demonstrated history of successful project initiation efforts

• Agile software development methodology and tools

• Atlassian products (e.g., JIRA, Confluence)

ARL at Penn State is an integral part of one of the leading research universities in the nation and serves as a University center of excellence in defense science, systems, and technologies with a focus in naval missions and related areas.

FOR FURTHER INFORMATION on ARL, visit our web site at www.arl.psu.edu.

Pursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault, and other matters. The ASR is available for review here.

Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473.

Federal Contractors Labor Law Poster

PA State Labor Law Poster

Penn State Policies

Copyright Information

Hotlines