Subject Matter Expert II

Responsibilities

• Conduct comprehensive hardware reverse engineering of OT and ICS devices 
• Analyze network-edge devices and embedded systems compromised by advanced threats 
• Perform deep-dive analysis of proprietary hardware targeted by adversaries 
• Conduct reverse engineering, failure analysis, vulnerability analysis, and other research techniques to understand complex hardware systems, assess the functionality of components, and identify exploitation risks
• Identify and extract deeply embedded malware from hardware components 
• Reverse engineer firmware and low-level software on embedded devices 
• Collaborate with Nightwing research teams to leverage cutting-edge analytical capabilities 
• Utilize and enhance KI2 system emulation capabilities for hardware analysis 
• Document exploitation methodologies and defensive countermeasures 
• Develop standard operating procedures for hardware forensics workflows 
• Train CSD analysts on hardware reverse engineering techniques 
• Provide expert consultation on edge device security and vulnerabilities 
• Support forensic investigations in environments lacking EDR visibility 
• Analyze proprietary communication protocols and embedded systems functions 
• Identify hardware backdoors, implants, and malicious modifications 
• Collaborate with electrical engineers on chip-off forensics procedures 
• Provide reach-back support to operational analysts during active investigations 
• Contribute to research initiatives on emerging hardware threats 
• Document technical findings and intelligence for stakeholder dissemination 

Minimum Qualifications

• Bachelor’s degree in Electrical Engineering, Computer Engineering or related discipline; Master’s degree or PhD preferred
• 10+ years of experience in hardware reverse engineering or embedded systems analysis
• Deep expertise in OT/ICS hardware platforms and vulnerabilities 
• Ability to analyze novel or proprietary systems with limited documentation 
• Strong communication skills for explaining complex technical findings 
• Experience working collaboratively in research-oriented environments 
• Strong experience with firmware reverse engineering and analysis 
• Proficiency with reverse engineering tools (IDA Pro, Ghidra, Binary Ninja) 
• Deep understanding of ARM, MIPS, PowerPC, and other embedded processor architectures 
• Experience analyzing network-edge devices (routers, switches, firewalls, IoT devices) 
• Knowledge of hardware debugging interfaces (JTAG, SWD, UART) 
• Strong programming and scripting skills (Python, C, Assembly) 
• Understanding of exploitation techniques targeting embedded systems 
• Experience with malware analysis in hardware/firmware contexts 
• Excellent analytical and problem-solving abilities 

Preferred Qualifications

• Experience supporting federal cybersecurity or critical infrastructure protection programs 
• Experience performing inspection, imaging, decapsulation, deprocessing, and other activities related to hardware reverse engineering and exploitation in a state-of-the-art microelectronics exploitation laboratory
• Background in offensive security or penetration testing of OT environments 
• Advanced certifications in reverse engineering (GREM, GXPN, or similar) 
• Experience with SCADA, PLC, RTU, and other industrial control components 
• Knowledge of critical infrastructure sector technologies (energy, utilities, manufacturing) 
• Familiarity with supply chain security and hardware implant detection 
• Experience with system emulation platforms and virtual hardware analysis 
• Understanding of threat actor TTPs targeting OT and edge devices 
• Background in electronics manufacturing or hardware security research 
• Experience with chip decapsulation and invasive hardware analysis techniques 
• DoD 8140.01 IAT Level III
• PMP