Reverse Engineer - 4580

POSITION SUMMARY:
This position is responsible for performing malicious code analysis, performing applied research to improve analysis tools and methodologies, and transitioning results to appropriate constituencies. Duties include:

- Analyzing malicious code, vulnerable software, security tools, and patches on a variety of technology platforms
- Analyzing and identifying security trends
- Corresponding with constituencies regarding security issues
- Developing technical content for transition to constituencies
- Participation in conferences, working groups, and other technical forums
- Developing relationships with key collaborators
- Applied research and development of tools and methods used to conduct analysis of malicious code
- Mentoring CERT/CC staff

Education/Training:  BS in Computer Science or related field with 8 years of applicable experience or MS in Computer Science or related field with 5 years of applicable experience or PhD with 3 years of applicable experience.

Experience: Experience with or substantial knowledge in all of the following areas:
- system and/or network administration
- operational details of multiple operating systems
- core internet protocols (e.g., TCP/IP, UDP, DNS, SMTP, HTTP, BGP, etc.).
- reverse engineering of malicious code
- development of tools to assist system and network administrators

Experience with or substantial knowledge is preferred in many of the following areas:
- common host-based and/or network security tools
- common types of attacks against systems and networks
- common types of security vulnerabilities
- common Internet security issues
- detailed knowledge of methods used by intruders to attack systems and networks
- theoretical underpinnings of computer security
- programming experience in multiple languages including assembly language
- best practices for secure code development
- compiler design for various operating platforms

Additionally, knowledge or familiarity with most of the following areas:
- computer security forensics
- information security tools
- computer security incident handling
- cryptography and encryption tools
- intrusion detection

Skills/Abilities:

- strong analytical and problem solving skills
- ability to develop and explain technical decisions
- ability to prioritize work
- ability to interact effectively with technical and non-technical audiences both written and verbally
- ability to work within a closely coordinated team and independently
- ability to work calmly and well under pressure
- ability to maintain composure while dealing with difficult people
- ability to recognize and deal appropriately with confidential and sensitive information
- ability to communicate effectively under normal and stressful situations
- ability to handle shifting priorities
- mentoring and training skills
- demonstrated experience in public speaking and effective communications with a large number of external, international collaborators and partners

Mobility:  Primarily sedentary in an office setting with some mobility.  Ability to travel to various locations within the SEI and CMU community, customer sites, conferences, and offsite meetings with some frequency.

Environmental Conditions: Normal office conditions; however, close contact with computer for prolonged periods of time.

Mental: The ability to work well under pressure of deadlines. The ability to interact with a large number of colleagues of varying seniority.

Other: Candidates must be able to pass a background investigation, obtain a DoD TS/SCI security clearance, and be a US citizen.



TO APPLY:
Careers@CarnegieMellon makes it easy for you to search for positions at the SEI that match your interests, apply for positions electronically, and create a Job Agent that will notify you by email when jobs that meet
your criteria become available.

Please visit the Careers@CarnegieMellon web site
( https://secured.kenexa.com/cmu/cc/MyProfileAction.ss?command=MyProfile) to create a profile and apply to this position (job number 4580).