Vulnerability Research Analyst
Core
Conduct software security evaluations using AI evaluation harnesses to analyze source code and binaries for vulnerabilities.
Role type
Senior IC vulnerability research analyst
Builds
Automated vulnerability detection suites and custom static analysis rules
Domain
Cybersecurity / Software Security
Deliverable
production ML models
Required skills
Static and dynamic software vulnerability analysis, Reverse engineering, Memory management and pointer arithmetic, CodeQL query development, Semgrep rule creation, Abstract Syntax Tree (AST) analysis, AI-driven automation tool usage, Firmware emulation
Preferred skills
Custom test driver and harness interface creation, Machine learning applications in bug discovery, Symbolic execution, DoD/IC defense program experience
Technologies
CodeQL, Semgrep, Tree-sitter, QEMU, Unicorn Engine, Ghidra, IDA
Responsibilities
Perform static and dynamic software vulnerability analysis on pre-extracted COTS/GOTS source code and firmware images, Deploy AI-guided fuzzing and automated vulnerability detection suites, Validate automated tool output by tracing execution paths, Develop custom CodeQL queries and Semgrep rules to codify bug patterns, Present vulnerability perspectives and risk assessments to stakeholders
Seniority
Senior, hands-on IC
