Vulnerability Researcher

APPLICATION INSTRUCTIONS:CURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process. Please do not apply here, apply internally through Workday. CURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, pleaselogin to Workday to complete thestudent application process. Please do not apply here, apply internally through Workday.If you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants.Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants. ​POSITION SPECIFICS​We are searching for a self-motivated Vulnerability Researcher to join our Cyberspace Operations Research Department in Reston, VA of the Applied Research Laboratory (ARL) at Penn State University. The Cyberspace Operations Research Department provides technical expertise in adversarial tactics, techniques, and procedures (TTPs) to support system evaluation and provide security hardening support to various sponsors. ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply.You will:Research cutting edge techniques and technologies for system exploitationLeverage expertise in reverse engineering, vulnerability research, and software development to address established needs and investigate solutions to emerging requirementsApply software engineering best practices to create proof-of-concept tools and configure test environments to perform demonstrations to sponsors and partnersAssist the Cyberspace Operations Research Department Head in maintaining relationships with sponsors through on-site technical discussions, preparation and presentation of technical materials, and project-related correspondenceProvide process enhancement for technical functionality evaluation, vulnerability analyses, cyberspace operations engineering, and penetration testing projectsApply project management principles and methods to the leadership of tasks or projectsProvide guidance to lower-level engineers to foster professional growthAdditional responsibilities for higher level position includes:Understand broad strategic objectives and contribute to them; nurture and maintain relationships with major customers/grantors of external research and development grant fundingIdentify grant/project follow-on work and persuade customers/grantors to fund; impact customer decisions and strategiesInitiate new project concepts and seek funding; develop technical proposals and make presentations to customers/grant sponsorsMentor department staff in the development technical, project, and business development skillsRequired skills/experience areas include:Documented application of reverse engineering and vulnerability testing tools (e.g. Ghidra/IDA, Kali Linux, Angr/AFL++, QEMU/Unicorn, etc)Reverse engineering, vulnerability research, malware analysis, and/or CNO tool developmentComputer networking fundamentals, Windows and *NIX operating systems, X86(64) and ARM or MIPS architecturesCyber operations architecture and software engineering practicesSoftware programming, programming languages, and development environments (to include at a minimum C, Java, or Python)Ability to express technical information clearly and concisely in documents and presentations for senior leaders to successfully comprehend and leverage for decision makingActive government security clearance at TS/SCI level with eligibility for special accessesPreferred skills/experience areas include:Cybersecurity exploit development and test environment configurationCybersecurity penetration testing / cybersecurity Red Team testing / white hat hackingMilitary cyberspace operations or computer network operationsDemonstrated history of successful project initiation effortsAgile software development methodology and toolsAtlassian products (e.g., JIRA, Confluence)Your working location will be fully on-site located in Reston, VA, but options exist for occasional hybrid of on-site/work from home based on project-dependent ability. This position will require periodic travel to remote locations in support of testing as part of a small team of researchers, engineers, and technologists.MINIMUM EDUCATION, WORK EXPERIENCE & REQUIRED CERTIFICATIONSIf filled as Research and Development Engineer - Cyber Security (ARL) - Senior Professional, this position requires: Bachelor's Degree - Engineering or Science 14+ years of relevant experience Required Certifications: None If filled as Research and Development Engineer - Cyber Security (ARL) - Advanced Professional, this position requires: Bachelor's Degree - Engineering or Science 5+ years of relevant experience Required Certifications: None If filled as Research and Development Engineer - Cyber Security (ARL) - Intermediate Professional, this position requires: Bachelor's Degree - Engineering or Science 2+ years of relevant experience Required Certifications: NoneARL at Penn State is an integral part of one of the leading research universities in the nation and serves as a University center of excellence in defense science, systems, and technologies with a focus in naval missions and related areas.FOR FURTHER INFORMATION on ARL, visit our web site at .BACKGROUND CHECKS/CLEARANCESEmployment with the University will require successful completion of background check(s) in accordance with University policies.Notice regarding employment at the Applied Research Laboratory (ARL): Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas. You must be a U.S. citizen to apply.SALARY & BENEFITSThe salary range for this position, including all possible grades, is $127,080.00 - $277,200.00. This salary range includes an adjustment based on required geographic work location.Salary Structure - Information on Penn State's salary structurePenn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children. For more detailed information, please visit our Benefits Page.CAMPUS SECURITY CRIME STATISTICSPursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault, and other matters. The ASR is available for review here.EEO IS THE LAWPenn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact .Federal Contractors Labor Law PosterPA State Labor Law PosterPenn State PoliciesCopyright InformationHotlinesSummaryLocation: Reston, VAType: Full time Penn State University