A

Arsiem

IT consulting and cybersecurity for governments

Subject Matter Expert 2

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeArlington County, Arlington, VA, USANo salary listed

About the Job

Requirements

  • A bachelor's degree in Electrical Engineering, Computer Engineering, or a related discipline is required.
  • At least 10 years of experience in hardware reverse engineering or embedded systems analysis is required.
  • Deep expertise in operational technology and industrial control systems hardware platforms and vulnerabilities is required.
  • Ability to analyze novel or proprietary systems with limited documentation is required.
  • Strong communication skills for explaining complex technical findings are required.
  • Experience collaborating in research-oriented environments is required.
  • Strong experience with firmware reverse engineering and analysis is required.
  • Proficiency with reverse engineering tools such as IDA Pro, Ghidra, and Binary Ninja is required.
  • Deep understanding of ARM, MIPS, PowerPC, and other embedded processor architectures is required.
  • Experience analyzing network-edge devices such as routers, switches, firewalls, and Internet of Things devices is required.
  • Knowledge of hardware debugging interfaces such as JTAG, SWD, and UART is required.
  • Strong programming and scripting skills in Python, C, and Assembly are required.
  • Understanding of exploitation techniques targeting embedded systems is required.
  • Experience with malware analysis in hardware and firmware contexts is required.
  • An active TS/SCI clearance and the ability to obtain Department of Homeland Security Entry on Duty suitability are required.

Responsibilities

  • Conduct comprehensive hardware reverse engineering of operational technology and industrial control systems devices.
  • Analyze network-edge devices and embedded systems compromised by advanced threats.
  • Perform in-depth analysis of proprietary hardware targeted by adversaries.
  • Conduct reverse engineering, failure analysis, vulnerability analysis, and other research techniques to understand complex hardware systems, assess component functionality, and identify exploitation risks.
  • Identify and extract deeply embedded malware from hardware components.
  • Reverse engineer firmware and low-level software on embedded devices.
  • Collaborate with research teams to leverage analytical capabilities.
  • Use and enhance the KI2 system emulation capabilities for hardware analysis.
  • Document exploitation methodologies and defensive countermeasures.
  • Develop standard operating procedures for hardware forensics workflows.
  • Train CSD analysts on hardware reverse engineering techniques.
  • Provide expert consultation on edge-device security and vulnerabilities.
  • Support forensic investigations in environments lacking endpoint detection and response visibility.
  • Analyze proprietary communication protocols and embedded system functions.
  • Identify hardware backdoors, implants, and malicious modifications.
  • Collaborate with electrical engineers on chip-off forensics procedures.
  • Provide reach-back support to operational analysts during active investigations.
  • Contribute to research initiatives on emerging hardware threats.
  • Document technical findings and intelligence for stakeholder dissemination.

Desired Qualifications

  • A master's degree or PhD is preferred.
  • Experience supporting federal cybersecurity or critical infrastructure protection programs is preferred.
  • Experience performing inspection, imaging, decapsulation, deprocessing, and other hardware reverse engineering and exploitation activities in a state-of-the-art microelectronics exploitation laboratory is preferred.
  • A background in offensive security or penetration testing of operational technology environments is preferred.
  • Advanced reverse engineering certifications such as GREM or GXPN are preferred.
  • Experience with SCADA, PLC, RTU, and other industrial control components is preferred.
  • Knowledge of critical infrastructure sector technologies, including energy, utilities, and manufacturing, is preferred.
  • Familiarity with supply chain security and hardware implant detection is preferred.
  • Experience with system emulation platforms and virtual hardware analysis is preferred.
  • Understanding of threat actor tactics, techniques, and procedures targeting operational technology and edge devices is preferred.
  • A background in electronics manufacturing or hardware security research is preferred.
  • Experience with chip decapsulation and invasive hardware analysis techniques is preferred.
  • DoD 8140.01 IAT Level III is preferred.
  • PMP is preferred.

About the Company

Arsiem

IT consulting and cybersecurity for governments

ARSIEM Corporation provides advanced IT consulting services, specializing in multiple areas including cybersecurity, enterprise architecture and development, and applications development, predominantly for government clients. The firm is distinguished by its deep commitment to cybersecurity and robust IT solutions that ensure enhanced protection and efficient digital infrastructures. This commitment to leveraging cutting-edge technologies in specialized areas of IT makes ARSIEM Corporation an excellent workplace for professionals aiming to actively contribute to significant, high-impact projects within the government sector.

Company size
11-50
Company stage
Not listed
Total funding
Not listed
Headquarters
Baltimore, Maryland
Founded
2013

Recently Posted Jobs

Explore more opportunities at Arsiem

See more jobs