Key skills
Vulnerability ResearchExploit DevelopmentMitigation DevelopmentLinux SystemsC/C++PythonAssembly x86/x64Assembly ARMLinux InternalsBinary AuditingReverse EngineeringIDA ProBinary NinjaGhidraMemory Corruption ExploitationWeb Application ExploitationFile Format VulnerabilitiesNetwork Protocol StructuresEnterprise Networking ArchitectureC++CAssembly
About this role
Cisco is a leader in innovative technology solutions, and they are seeking a Security Research Engineer to join their Talos team. The role involves conducting security research, developing tools for vulnerability analysis, and providing expertise to enhance the security posture of Cisco's products.
Responsibilities:
- Security research including development of tools for vulnerability analysis and mitigation
- Development of static and run-time analysis tools to figure out root cause and input conditions related to a vulnerability
- Vulnerability triage and proof of concept exploit development to support the creation of detection content
- Write detailed technical reports, summaries, and testing methodologies
- Research emerging technologies, protocols, and testing methodologies
- Develop proof of concept exploits for testing vulnerability mitigations
- Perform patch analysis to find and trigger vulnerabilities
- Reverse engineer binary applications, protocols, and formats
- Analyze vulnerabilities and emerging security threats and technologies
- Provide critical security focused expertise to engineering organizations
Requirements:
- 3+ years of experience in vulnerability research or a closely related area such as exploit or mitigation development on Linux Systems
- 3+ years' experience with C/C++, and a scripting language (e.g., Python), and assembly (e.g., x86/x64, ARM, etc.)
- Bachelor's degree or equivalent in Computer Science, Electrical Engineering, Cyber Security, or other tech-related degree
- Experience with Linux internals
- Experience with binary auditing and reverse engineering, and with related tools such as IDA Pro, Binary Ninja, Ghidra, etc. and with plugin development
- Experience with common vulnerabilities and methods of exploitation, such as memory corruption, web application exploitation, file format vulnerabilities, protocol-based weaknesses, etc
- Knowledge of common file formats, network protocol structures, and enterprise networking architecture
- Ability to work independently with minimum supervision and to tackle additional tasks as the need arises