Job Description

Gormat is looking for a Software Engineer 2 with the following skills:

• The ideal candidate will perform Software Engineering and vulnerability research with a focus on OCO (Offensive Cyber Operations) and DCO (Defensive Cyber Operations) activities.
• Work with customers directly performing full cycle system engineering, gathering requirements and source code, to technical documentation and specifications.
• Performing long term, in depth vulnerability assessments using reverse engineering, kernel debugging, and exploitation technologies.
• Engineers are encouraged to be creative and exhaust every technical avenue to uncover weaknesses of the system and exploit them.
• Performs software development tasks and assists in the design and architecture of software applications individually or as a team member
• Develops production quality software based on pre-defined software requirements and designs
• Reviews, analyzes, and modifies programming systems to include coding, testing, debugging, installing, and documenting to support organizations software applications
• Implements software development process improvement activities in accordance with organizational procedures
• Develops unit and integration tests and test plans for software applications and prepares software test reports
• Writes documentation for software and software interfaces

Required Qualifications

• High School and Seven [7] years experience in software development technologies and methodologies.
• Or BS in STEM field (Electrical/Computer/Software Engineering, Computer Science, Math or Information Systems) and Three (3) year of experience in software development technologies and methodologies.
• C/C++ Software development skills
• Experience in x86/x64 assembly, software reverse engineering, kernel debugging, and protocol stacks
• Experience developing computer exploits

Preferred Technical Skills:

• Experience developing computer exploits
• Experience in Software Reverse Engineering with at least 1 of the following tool or an equivalent: IDAPro, GDB, WinDbg, Immunity/OllyDbg
• Experience in malware analysis and mitigation techniques
• Strong understanding of the Windows and Linux Operating System internals and APIs
• Knowledge of analyzing shellcode, packed and obfuscated and the associated algorithms a plus
• Experience with scripting languages such as Python, Bash, Pearl, etc
• Experience in host and network analysis to identify and characterize anomalies and vulnerabilities in the platform
• Experience documenting findings in reports and briefings

TS/SCI with polygraph is required.