Binary Analysis Research Engineer

Galois tackles the hardest problems in computer science. Our mission is to assure trust in critical systems that protect the privacy and integrity of information in the real world.  ​Core to​ ​this​ ​is​ ​the​ ​application​ ​of​ ​formal​ ​analysis​ ​techniques​ ​that​ ​allow​ ​systems​ ​to​ ​be​ ​modeled, analyzed,​ ​and​ ​mathematically proven​ ​correct to ensure​ ​that a​ ​system​ ​behaves​ ​exactly​ ​as​ ​we​ ​intend​ ​under​ ​all​ ​circumstances.

We are a community of researchers, engineers, and operations people dedicated to creating trustworthiness in critical systems in every functional area of the organization. Our organization is highly collaborative, and we pursue working from first principles, transparency, building deep trust, learning and innovating, and creating space for you to be authentically you. Our unique organizational structure enables us to adapt to the needs of the innovative projects we deliver.

We are employee-owned and aspire to provide employees with a sense of freedom to pursue passions in and out of work — whether it be opportunities to learn, career growth, a sense of community, or whatever else brings you value as a person. 

Research Engineers at Galois design and develop advanced technologies for safety- and security-critical systems, networks, and applications. Engineers work in small team settings and must successfully interact with clients, partners, and other employees in a highly cooperative, collaborative, and intellectually challenging environment. We’re looking for people who can invent, learn, think, and inspire.

For more on our organizational structure, visit Life at Galois.

Galois is hiring a research engineer with experience in program and binary analysis to join our team! This role will primarily focus on advancing the state of the art in program analysis research. Researchers in this role will use their expertise to design, develop, and apply novel tools to find flaws and produce evidence of correctness in important software and systems, ensuring they meet the highest security standards.

As a Research Engineer, you will have the following responsibilities: 

• Requirements gathering: engaging the client in a series of discussions, where each iteration refines the needs of the client, and leads to the suggestion of means to meet those needs.
• Architecture and design: constructing high-level architectural descriptions of software systems, and constructing deeper program designs by fleshing out architecture prototypes. Architectures must be designed with assurance in mind, determining where and how formal methods are to be applied.
• Implementation: extending design prototypes through to a finished product, with care taken to ensure robustness and ease of use. 
• Formal verification: use mechanical reasoning tools such as SMT solvers and symbolic execution frameworks to demonstrate or analyze desired security and correctness properties of software and binaries.
• Testing and validation: constructing and regularly conducting system, unit, and regression tests, and conducting semi-formal validation and verification.
• Technology research and development: conducting speculative research and development of cutting-edge technology, and incorporating that technology in product prototypes. 
• Technical infrastructure development: developing (designing, implementing, and maintaining) tools to be used within Galois, and developing library code to be shared among projects.

• Education—A minimum of a Bachelor's degree in computer science or equivalent is required. An MS or PhD in CS or a related field is desirable but optional.
• Required Technical Expertise:
• Must have hands-on experience developing software and implementing formal verification techniques.
• Familiarity with binary analysis and reverse engineering techniques, such as symbolic execution and binary lifting.
• Experience with reverse engineering tools like Ghidra, IDA Pro, Binary Ninja, and fuzzers. 
• Experience developing program analysis capabilities in Haskell or other functional programming languages. 
• Experience in all aspects of software engineering practices.
• Proficiency in C/C and knowledge of assembly language.
• Required General Skills:
• Must work well with customers, including building rapport, identifying needs, and communicating with strong written, verbal, and presentation skills. 
• Must be highly motivated and able to self-manage deadlines and quality goals.

• Preference will be given to candidates with one or more of the following technical expertise:
• Direct experience in developing high-assurance systems and/or security products.
• Prior experience in reverse engineering or red-team assessments. 
• Familiarity with modern compilers and low-level languages such as LLVM, MIR, and CIL.  

The employee must be able to obtain and retain a security clearance.

The candidate must not require a U.S. government export license to authorize access to export-controlled technology and software required to perform this role. 

This role requires the ability to work in-person from one of Galois' office locations in Arlington, VA, Dayton, OH, Minneapolis, MN, or Portland, OR.

We offer a robust benefits package to provide for your and your family’s well-being, including:

• Employee Stock Ownership Plan (ESOP)
• 401(k) retirement plan with 5% employer match and immediate vesting
• Fully paid medical insurance plans and dental and vision reimbursement plan
• Health Savings Account (HSA) with generous employer contributions
• Mental health and wellbeing support through our employee assistance program
• 5 weeks of paid time off and 9 days of paid company holidays each year
• 16 weeks of fully paid parental leave (available for birth, adoption, and fostering)
• 1 week of fully paid “Blue Sky” innovation time each year to pursue your interests

For more information on our benefits, visit Careers at Galois.

Compensation is based on the value of your results, not your value as an employee or person. The compensation process, individual salaries, and criteria for salary changes are transparent to the entire company.

For more information about our forward-looking and transparent approach to pay, visit Compensation.

Galois is an Equal Opportunity Employer and does not discriminate in employment opportunities or practices based on race, ethnicity, national origin, ancestry, color, sex, gender identity or expression, sexual orientation, marital or parental status, pregnancy or childbirth, disability, age, religion, creed, genetic information, veteran status, or any other characteristic protected by applicable federal, state, or local law. We encourage and respect different viewpoints and experiences as being essential to the process of innovation. We strive to acquire, grow, and maintain a diverse and inclusive workplace that applies principles and standards equitably while supporting the needs and accommodations of the individual employee.

Consistent with the Americans with Disabilities Act (ADA) and federal and state laws, it is the policy of Galois, Inc. to provide reasonable accommodation when requested by a qualified applicant or employee with a disability, unless such accommodation would cause an undue hardship. If you require reasonable accommodation in completing the employment application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please contact peopleoperations@galois.com.