Responsibilities

Under the guidance of a principal investigator (PI), you will implement innovative prototypes to monitor running programs and verify that they are working as intended, even when subject to attack. If a program is compromised, the prototype will need to track the impact of the attack. As a research-oriented software engineer, you will:                                                         

• Study and implement security-monitoring approaches drawn from academic literature or in-house design


• Evaluate the resulting prototype implementation to test its value in addressing the research goals


• Discuss results with the PI and respond by adapting the prototype to better address research goals


• Contribute to presentations and written reports that keep research sponsors up to date on project progress


• Prepare prototypes for demonstrations and evaluations by research sponsors. Respond to any last-minute complications to ensure a smooth and successful evaluation

• BS in computer science or equivalent


• Strong software application development skills in C


• Experience in the area of software security


• In-depth understanding of common software vulnerabilities

• MS or PhD in computer science or equivalent


• Experience with one or more of the following: C++, Python, Lisp


• Experience with the following, especially when applied to improve software security, resiliency and maintainability:
  
  
  
  • Runtime monitoring
  
  
  • Runtime verification
  
  
  • Dynamic program transformation and instrumentation
  
  
  • Host-based intrusion detection
  
  
  • Virtual machine introspection
  
  
  • Security policy languages and specifications
  
  
  • Software isolation or sandboxing
  
  
  • Profiling
  
  
  • Fault analysis and isolation
  
  
  • Embedded systems
  
  
  • Low-level programming at the kernel, hypervisor, firmware, or BIOS level
  
  
  • Penetration testing