Senior Microelectronics Security Engineer

Riverside Research Institute supports government-focused microelectronics security research and embedded systems cybersecurity R&D. In this Senior Microelectronics Security Engineer role, you’ll help shape and execute research efforts that support government strategy and development across current and future program concepts.

Location: Dayton, OH (onsite, Beavercreek, OH)
Compensation: USD 165,000 to 205,000 per year (based on experience, location, and other factors)
Clearance: U.S. citizenship required; Secret clearance required to start, with ability to obtain Top Secret and required program access approvals
Work model: On-site only (remote work not available). Travel is expected to be no more than 4 to 6 trips per year.

Responsibilities

• Support the government customer’s research program strategy development and execution
• Develop plans, solutions, and strategies for R&D challenges aligned to current and future program concepts and products
• Act as a principal embedded systems cybersecurity advisor to the government customer and research team
• Collaborate with national-level hardware security research working groups and steering committees
• Support government customer priorities in technical working groups, technical exchange meetings, and conferences
• Perform technical work as required, including software tool development and reverse engineering activities
• Study and assess software-based threats to embedded systems from scientific journals, hacking community postings, and conference presentations
• Stay current on embedded security threats, vulnerabilities, and countermeasures, including relevant TTPs, and innovate protective technologies through cutting-edge R&D
• Document findings in technical reports and presentations
• Provide technical mentorship to junior researchers within your area of expertise

Requirements

• Bachelor’s degree in Computer Engineering, Computer Science, or a related technical area with 12 years relevant experience, or a related technical Master’s degree with 8 years relevant experience, or a PhD with 5 years relevant experience
• Secret clearance required to start; ability to obtain Top Secret clearance and all required program access approvals
• Willingness to work in a secure U.S. Government facility
• Experience supporting government contracts
• Experience planning, developing, and executing R&D program strategy
• Strong understanding of hardware security attacks, hardware exploitation, or side-channel analysis
• Extensive reverse engineering experience across embedded environments, including embedded Linux (e.g., PetaLinux, Yocto, Buildroot), RTOS (e.g., VxWorks, Integrity), and bare-metal firmware
• Experience with disassemblers for vulnerability research (Ghira, IDA Pro, BinaryNinja)
• Experience with one or more assembly languages (x86, x64, ARM, MIPS, PowerPC, etc.)
• Experience with debuggers such as WinDbg, HyperDbg, GDB/KGDB/KDB, TRACE32, and OpenOCD
• Strong familiarity with published vulnerability databases (e.g., CVE)
• Experience with embedded processors (e.g., RISC-V, ARM, MicroBlaze, Nios)
• Experience with simulation/emulation and hardware-in-loop (HIL) to support debugging and reverse engineering
• Experience presenting technical material to both technical and non-technical audiences

Technologies

• PetaLinux, Yocto, Buildroot
• VxWorks, Integrity, firmware
• Ghira, IDA Pro, BinaryNinja
• x86, x64, ARM, MIPS, PowerPC
• WinDbg, HyperDbg, GDB, KGDB, KDB, TRACE32, OpenOCD
• CVE
• RISC-V, MicroBlaze, Nios

Desired Qualifications

• Embedded software development experience
• Experience leading technical teams to successful product delivery
• Familiarity with compiled languages such as C/C++ and Rust
• Knowledge of formal analysis, static analysis, or related cyber research areas
• Previous experience working in a secure U.S. Government facility
• Active DoD Top Secret (TS) or equivalent U.S. Government security clearance; SCI caveat highly desired

Position overview: The Riverside Research Engineering and Support Solutions (ESS) directorate conducts R&D of cyber-physical attacks against embedded systems. This position is in Beavercreek, OH and requires security clearance. All Riverside Research opportunities require U.S. citizenship.