About this role
<p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><strong>Job Title: Senior Specialist, Security Software Research Engineer <br>Job Code: 36915<br>Job Location: Remote<br>Job Schedule: 9/80: Employees work 9 out of every 14 days – totaling 80 hours worked and have every other Friday off.<br><br></strong></span></p> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><strong>Job Description:</strong></span></p> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">L3Harris has an immediate opening for a Senior Security Software Research Engineer with our security group, Trenchant. Our teams are comprised of elite security researchers and former intelligence professionals with a fixation on realizing mission outcomes. We are pursuing top-tier senior security researching talent with experience across a host of technologies and paradigms. Our business unit offers an exceptional value-proposition for individuals looking to make an impact.</span><br><br></p> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Trenchant’s expertise is the by-product of the L3Harris acquisition of two highly-regarded information security businesses – Azimuth Security and Linchpin Labs. United under Trenchant, we are a key component of L3Harris’ Intelligence and Cyber International Division. We are a trusted, discrete partner furnishing security products, consultancy, training and integration services to allied security, defense, and law enforcement agencies.</span><br><br></p> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><strong>Essential Functions:</strong></span></p> <ul> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Finding vulnerabilities in ubiquitous Internet-deployed software and/or popular devices’ software or firmware.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Constructing exploits for vulnerabilities discovered by yourself or your team. </span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Guiding the teams technical outcomes to measurable deliverables for the organization. </span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Training, management and provision of guidance to all levels of team members. </span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Regular interaction with managers and customer-facing staff members to field queries and questions about technical work.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Ability to obtain and maintain security clearance.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Take an active role in cross-team projects when required.</span></li> </ul> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><strong>Qualifications:</strong></span></p> <ul> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Bachelor’s Degree with a minimum 6 years prior relevant experience. Graduate Degree with a minimum of 4 years of prior related experience. In lieu of a degree, minimum of 10 years of prior related experience.</span><br><br></li> </ul> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><strong>Preferred Additional Skills:</strong></span></p> <ul> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">5+ years of Vulnerability Research, reverse engineering, and bug-hunting.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience with static and dynamic binary analysis.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience with iOS, Android, Windows, Linux, or embedded systems kernel, user land, and internals or browser internals.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience with common tools in security research (e.g. IdaPro, Ghidra, Radare, Binary Ninja, AFL, SysInternals, GDB, WinDBG, etc).</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience with common programming languages (e.g. C/C++, Python, Swift, etc).</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience with common architectures (e.g. x86/64, ARM, AARCH64, MIPS, PowerPC, TILEGX, etc).</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience with modern security system features, exploit mitigations, and evasion techniques (e.g. defeating ASLR, DEP, Control Flow Guard, ROP, Security Product/AV Evasion, etc).</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience with a wide-range of modern exploitation concepts and techniques.</span></li> </ul> <ul> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience with Computer Network Operations / Computer Network Exploitation.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience with symbolic execution and emulation software (e.g. QEMU, Corellium, VHDL, etc).</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Cryptographic experience (e.g. side-channel attacks, implementing AES, etc).</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Experience teaching and mentoring junior vulnerability researchers.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">Bespoke fuzzer development experience.</span></li> </ul> <p> </p> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt;color:black">In compliance with pay transparency requirements, the salary range for this role in California, Massachusetts, New Jersey, Washington, and the Greater D.C, Denver, or NYC areas is $111,500 - $207,500. The salary range for this role in Colorado state, Hawaii, Illinois, Maryland, Minnesota, New York state, and Vermont is $97,000 - $180,000. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the applicability of collective bargaining agreements.</span></p> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><br><br><span style="color:white">#LI-FS1</span></span></p>