CNO Reverse Engineer

Description of Task to be Performed:

Perform reverse engineering of hardware components, software applications and operating systems to determine functionality, code structure, and circuit design for use in the design and development of CNO tools and techniques. Document and deliver reports, proof-of-concept code, prototypes and hands-on demonstrations. Author and participate in technical presentations on assigned projects. The Level 2 CNO Reverse Engineer shall possess the following capabilities: Program in Assembly, C, C#, C++, Java, Perl, or Python. Administer and use hardware and software reverse engineering tools. Program using CNO tools and techniques. Use software version control tools (e.g., Subversion and CVS). Create and brief technical presentations. Provide written reports, proof-of-concept code, prototypes, and hands-on demonstrations of reverse engineering results. Provide/author and participate in technical presentations on assigned projects.

Required Qualifications:

• Clearance: U.S. Citizen with an active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance and a Full Scope Polygraph (FSP) completed within the last two (2) years.
• Location: Full time on-site in Hanover, Maryland.
• Experience and knowledge:
• Bachelor’s degree in computer science, Cybersecurity, Computer Engineering, Intelligence Studies, Information Technology, or a related technical discipline.
• Minimum of five (5) years of professional experience performing software reverse engineering, vulnerability research, or low-level software analysis supporting Department of Defense (DoD), Intelligence Community (IC), or Federal Government programs.
• Demonstrated experience developing, modifying, and maintaining production-quality software, with the ability to clearly explain software engineering methodologies, design decisions, and implementation approaches.
• Proficiency in one or more of the following programming languages: C, C++, and Python, with experience developing tools, utilities, or mission applications supporting cyber operations.
• Demonstrated experience conducting Windows software reverse engineering, including analysis of user-mode and kernel-mode applications, Windows kernel internals, and Windows driver development.
• Experience with Linux kernel development, kernel module analysis, device driver development, and low-level operating system internals.
• Demonstrated experience performing software reverse engineering as a primary duty, with approximately 75% of previous responsibilities focused on reverse engineering, binary analysis, or vulnerability research.
• Experience conducting static and dynamic malware analysis, reverse engineering malicious code, and identifying adversary tactics, techniques, and procedures (TTPs).
• Experience supporting cyber operations, with familiarity across the Computer Network Operations (CNO) mission space, including offensive cyber operations, defensive cyber operations, exploitation, and cyber intelligence workflows.
• Practical experience with exploit development, vulnerability discovery, binary exploitation, or software vulnerability research.

Preferred Qualifications:

• Master's degree in Computer Science, Cybersecurity, Computer Engineering, Information Assurance, Intelligence Studies, or a related technical discipline.
• Professional cybersecurity certification(s) demonstrating advanced knowledge of offensive security, vulnerability research, reverse engineering, or penetration testing, such as:
• Offensive Security Certified Professional (OSCP)
• Certified Ethical Hacker (CEH)
• GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
• Demonstrated experience conducting advanced exploit development, vulnerability research, or software exploitation against complex operating systems and applications.
• Experience supporting offensive cyber operations, cyber capability development, or research and development efforts within the Department of Defense (DoD), Intelligence Community (IC), or other Federal Government organizations.
• Experience reverse engineering sophisticated malware, advanced persistent threat (APT) toolsets, or nation-state cyber capabilities.
• Working knowledge of current adversary tactics, techniques, and procedures (TTPs), emerging cyber threats, and evolving trends in offensive cybersecurity, exploit research, and vulnerability discovery