Reverse Engineer

Reverse Engineer - Job Description

Who We Are

Kudu Dynamics is a 100% employee-owned company, forged out of a decade of experience in computer network operations and staffed with talent who have built, overseen, and enhanced capabilities throughout the entire USG arsenal. Our team of hackers, engineers, makers, and shakers have experience spanning centuries of research, development, and operations missions - across desktop, mobile, IoT, and embedded platforms. Kudu Dynamics is uniquely qualified to anticipate tomorrow’s threats and build the next generation of capabilities.

Full Job Description

The Kudu Dynamics Aggressor team of security researchers and software engineers is actively developing an automated firmware vulnerability discovery tool for Internet of Things (IoT) devices. The Aggressor team has generated thousands of potential vulnerabilities and has hundreds of physical devices (IP cameras, wireless routers, etc.) ready for real-world exploit development. Our team is eager to bring on one to two Software Engineers who are ready to directly contribute in a reverse engineering, vulnerability research, system emulation, and exploit development role.

Responsibilities

• Reverse engineer commercial IoT devices to get access to firmware and hardware debugging connections
• Research CVEs and other freely available information to help inform your exploit development
• Create and demonstrate usable exploits across a variety of commercial IoT devices
• Development of new microservices, primarily in Python, to automate the vulnerability discovery process
• Develop/refine system emulation of IoT devices
• Use the Aggressor system to generate new potential vulnerabilities from firmware images
  
  
  

Minimum Qualifications

• Must have a TS/SCI Clearance
• Bachelor’s degree in Computer Science, Computer Engineering, or similar field of study
• Experience with one or more disassemblers (IDA, Binary Ninja, Ghidra, etc.)
• Experience with one or more assembly languages (x86, MIPS, ARM, etc.)
• Experience with software development and testing in Python and C/C
  
  
  

Nice-to-have Qualifications

• Three or more years experience in a reverse engineering/vulnerability researcher role
• Experience with firmware and/or embedded systems reverse engineering
• Experience with one or more emulation frameworks (QEMU, Firmadyne, etc.)
• Experience with Docker and container orchestration (Nomad, Kubernetes, Docker Swarm, etc.)
  
  
  

Benefits We Provide

• Equity at a company that is doing dynamic, fun, meaningful, and interesting work.
• A flexible work schedule, with the option to work remotely most days, if that’s your style.
• Your own yearly discretionary budget to buy the things that make you happy.
• In addition to highly competitive salaries, we offer premium healthcare options, 401k matching, and an annual pass to a swim in the bonus pool. We also offer four weeks of paid time off and 11 federal holidays to utilize whenever you want throughout the year.
• Awesome, enthusiastic co-workers and a company culture that promotes a jerk- free environment. Rattle the windows with the company band, participate in board game or movie nights, and help balance out the scotch vs. bourbon ratio in the office.
  
  
  

Kudu provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.