Cyber Capability Developer – Senior

Functional Responsibilities:

The CCD - Senior shall possess an active and transferable U.S. TOP-SECRET (with SSBI).The Senior Cyber Capability Developer (Reverse Engineer) is an accomplished technical professional specializing in the analysis and understanding of software, firmware, and systems through reverse engineering techniques. With a background in Agile methodologies, they bring expertise in both technical analysis and project management, contributing to the successful execution of projects within Agile environments. This role requires advanced skills in reverse engineering coupled with experience in Agile practices to drive efficiency, collaboration, and innovation. The Contractor shall provide Senior Reverse Engineer services, working alongside the Government Supervisors, Product Owners, and developers. These services shall include:

1. Reverse Engineering Mastery: Lead and conduct advanced reverse engineering efforts to analyze software binaries, firmware, and systems, uncovering vulnerabilities, extracting proprietary algorithms, and understanding complex functionalities.
2. Agile Project Management: Apply Agile principles and practices to manage reverse engineering projects effectively. Collaborate with cross-functional teams, prioritize tasks, and ensure timely delivery of project milestones.
3. Vulnerability Identification: Drive the discovery and analysis of security vulnerabilities, weaknesses, and design flaws in software applications and systems through comprehensive reverse engineering techniques.
4. Technical Leadership: Provide technical leadership and mentorship to junior reverse engineers, guiding them in advanced analysis methodologies, problem-solving, and decision-making.
5. Collaborative Problem-Solving: Collaborate closely with security analysts, developers, and stakeholders to address complex technical challenges, propose solutions, and drive implementation efforts.
6. Documentation and Reporting: Document reverse engineering findings, analysis methodologies, and project progress. Prepare technical reports and presentations to communicate results, recommendations, and project status effectively.
7. Continuous Improvement: Continuously improve reverse engineering processes and practices within the team. Identify opportunities for optimization, implement best practices, and drive innovation in reverse engineering techniques.

Minimum General Experience:

Minimum of eight (8) years of professional experience in reverse engineering, cybersecurity, or software development roles, with significant exposure to advanced reverse engineering activities. Minimum of three (3) years of experience working in Agile environments, preferably in roles involving project management or leadership responsibilities. Experience using industry standard RE tools (IDA Pro, Ghidra, JEB, Hopper) to determine how closed-source software behaves. Experience developing, debugging and/or reverse engineering code for popular mobile programming languages (e.g., Java, Objective-C, Swift, etc.). Experience with the exploitation of mobile devices and/or the software within mobile devices to enable access to protected information. Experience determining how files are structured and identifying standard methods for encoding data. Experience analyzing raw binary data. Demonstrable ability to write programs in a variety of languages, including C, C++, C#, Python, and Java. Experience working on multiple OS platforms, including Linux, MacOS, Windows, Android, and iOS. Demonstrable ability to review others' code in a distributed version control system, namely git. Experience with iOS and Android mobile development languages, including Java, Objective-C, or Swift. Experience writing and debugging ARM assembly code.

Education and Certification Requirements:

A bachelor's degree in computer science, Electrical Engineer, Cybersecurity, or a relevant field, or a master's degree in computer science, Cybersecurity, or related disciplines is preferred. Relevant certifications such as Certified Reverse Engineering Analyst (CREA), Offensive Security Certified Professional (OSCP), or similar certifications demonstrating expertise in reverse engineering and cybersecurity are highly desirable.