Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
About the Role
L3Harris is seeking an experienced Senior Security Software Research Engineer to join their security group, Trenchant. This role involves finding vulnerabilities, constructing exploits, and guiding technical outcomes within a team of elite security researchers. The position offers an opportunity to make a significant impact in a dynamic environment.
Responsibilities
- Finding vulnerabilities in ubiquitous Internet-deployed software and/or popular devices’ software or firmware.
- Constructing exploits for vulnerabilities discovered by yourself or your team.
- Guiding the teams technical outcomes to measurable deliverables for the organisation.
- Training, management and provision of guidance to all levels of team members.
- Regular interaction with managers and customer-facing staff members to field queries and questions about technical work.
- Take an active role in cross-team projects when required.
Requirements
- 3+ years of Vulnerability Research, reverse engineering, and bug-hunting.
- Experience with static and dynamic binary analysis.
- Experience with iOS, Android, Windows, Linux, or embedded systems kernel, user land, and internals or browser internals.
- Experience with common tools in security research (e.g. IdaPro, Ghidra, Radare, Binary Ninja, AFL, SysInternals, GDB, WinDBG, etc).
- Experience with common programming languages (e.g. C/C++, Python, Swift, etc).
- Experience with common architectures (e.g. x86/64, ARM, AARCH64, MIPS, PowerPC, TILEGX, etc).
- Experience with modern security system features, exploit mitigations, and evasion techniques (e.g. defeating ASLR, DEP, Control Flow Guard, ROP, Security Product/AV Evasion, etc).
- Experience with a wide-range of modern exploitation concepts and techniques.
Skills
- Vulnerability Research
- Reverse engineering
- Bug-hunting
- Static binary analysis
- Dynamic binary analysis
- iOS internals
- Android internals
- Windows internals
- Linux internals
- Embedded systems kernel
- Embedded systems user land
- Browser internals
- IdaPro
- Ghidra
- Radare
- Binary Ninja
- AFL
- SysInternals
- GDB
- WinDBG
- C/C++
- Python
- Swift
- x86/64
- ARM
- AARCH64
- MIPS
- PowerPC
- TILEGX
- ASLR
- DEP
- Control Flow Guard
- ROP
- Security Product Evasion
- AV Evasion
- Computer Network Operations
- Computer Network Exploitation
- Symbolic execution
- Emulation software
- QEMU
- Corellium
- VHDL
- Cryptographic experience
- Side-channel attacks
- Implementing AES
- Teaching vulnerability researchers
- Mentoring vulnerability researchers
- Bespoke fuzzer development
Location
- Picadilly circus, London
Work Type
- Full-time
Experience Level
- Senior
Benefits
- Bonus scheme
- 25 days holiday per year (plus bank holidays), increasing with long service and with the opportunity to buy/sell up to 5 days
- Private medical insurance with optional family cover
- Pension scheme of up to 8% employer contribution
- Life Assurance 4x salary (flexible up to 10x)
- Group income protection
- Flexible opt-in extras such as a health care cash plan, dental insurance, gym membership, critical illness cover, cycle to work scheme, travel insurance and electric car scheme
- Employee Family Assistance Program providing mental health and wellbeing support
About the Company
- L3Harris' security group, Trenchant, is comprised of elite security researchers and former intelligence professionals focused on mission outcomes.
- Trenchant's expertise stems from the acquisition of Azimuth Security and Linchpin Labs.
- Trenchant is a key component of L3Harris’ Intelligence and Cyber International Division.
- The company is a trusted partner providing security products, consultancy, training, and integration services to allied security, defense, and law enforcement agencies.
Equal Opportunity
- Due to the nature of our work some of our roles require a UK nationality and the ability to obtain a security clearance.
- Applicants who accept a conditional offer of employment must meet the requirement of right to work in the UK and must meet eligibility requirements for access to classified information and will be subject to government security checks.