Embedded System Security Engineer – GTRI – CIPHER – Open Rank at Georgia Tech Research Institute – Washington, DC

Overview:

The Georgia Tech Research Institute (GTRI) is the nonprofit, applied research arm of the Georgia Institute of Technology (Georgia Tech). Founded in 1934 as the Engineering Experiment Station, GTRI has grown to more than 2,900 employees, supports eight laboratories at more than 20 locations nationwide, and conducts more than $940 million in problem-solving research annually for government and industry. GTRI’s renowned researchers combine science, engineering, economics, policy, and technical expertise to solve complex problems for U.S. federal, state, and industry government.

Georgia Tech Mission and Values

Georgia Tech’s mission is to develop leaders who advance technology and improve the human condition. The institution has nine core values that are fundamental to everything we do:

1. Students come first with us.
2. We strive for excellence.
3. We thrive on diversity.
4. We celebrate collaboration.
5. We are proponents of innovation.
6. We guarantee freedom of research and expression.
7. We promote the well-being of our community.
8. We act ethically.
9. We are responsible stewards.

Over the next decade, Georgia Tech will become a model of inclusive innovation, a leading technology research university of unparalleled breadth, working tirelessly for the common good; pioneering work to address the greatest local, national, and global challenges and opportunities of our time; making technology broadly accessible; and developing exceptional, principled leaders from all backgrounds who are ready to conceive transformative ideas and create solutions that truly impact people.

Project/unit description

The Embedded Systems Vulnerability Division (ESVD) within CIPHER leverages extensive expertise in hardware, software, networking, and RF communications to identify and evaluate cyber vulnerabilities in military assets, industrial control systems, and critical infrastructure systems. ESVD researchers participate in Department of Defense working groups on cyber
vulnerability assessments and collaborate with Georgia Tech faculty on IoT and critical infrastructure systems security. Additionally, this position will create materials and lead professional education classes, and engage state and federal leaders in strategic tech policy conversations.

Purpose of the job

The Embedded System Security Engineer will join an established team of experts in vulnerability assessment of cyber-physical systems. Performs firmware extraction, reverse engineering and vulnerability assessment of firmware running on embedded communication and cyber-physical systems. Performs static and dynamic analysis of software/firmware using decompiler tools to identify technical operational characteristics of the system in order to reverse engineer system functionality, characterize protocols and interfaces while identifying potential vulnerabilities. Researches, develops and uses existing side-channel analysis methods, such as clock and power failures. Develops and demonstrates exploitation methods against identified vulnerabilities.

Main Responsibilities

Perform vulnerability analysis

Lead and/or contribute to white papers and proposals. Seek and respond to opportunities for new research. Lead IRAD efforts to develop new innovative research areas. – Lead the development and demonstration of techniques to gain unauthorized access to and/or exploit information networks. Lead the development and demonstration of mitigation techniques to protect systems. – Lead the development of innovative software analysis tools to assist in reverse engineering and vulnerability analysis. – Research capabilities, implementation methods, and security features of the device under test to assist in determining software functionality and potential weaknesses. Common devices evaluated include communications devices (radios, modems, routers), ICS, and IoT devices. – Primary author of technical reports/presentations for high complexity projects. Gather report input from other researchers and prepare the final report.

Additional responsibilities

Lead strategic IRAD initiatives to enhance GTRI’s capabilities in securing multiple sectors of critical infrastructure.
Lead teams that write proposals to develop research programs with existing and new clients.
Intelligence analysis of complex military and industrial systems and networks.
Provide technical briefings to senior government and industry officials.
Lead author of technical reports/presentations for high complexity projects.
Develop cybersecurity content for new Georgia Tech Professional Education courses.
Seek collaborative research relationships with Georgia Tech’s academic faculty.

Required minimum qualifications

Teaching experience at university level
Experience leading large technical efforts/teams

Desired qualifications

Active Top Secret Clearance
Experience providing strategic technical direction and growth in OT cybersecurity research
Documented examples of providing thought leadership and national recognition

Travel requirements

10% – 25% travel

Education and duration of experience

This vacancy is an open-rank announcement. The final offer is contingent upon the candidate’s qualifications in accordance with the Research Faculty Extension Professional ranks as outlined in section 3.2.1 of the Georgia Tech Faculty Handbook

14 years of relevant experience with a Bachelor’s degree in Information Technology, Telecommunications, Electrical Engineering, Computer Science, Data Science or related.
12 years of relevant experience with a Master’s degree in Information Technology, Telecommunications, Electrical Engineering, Computer Science, Data Science or related.
9 years of relevant experience with a Ph.D. in Information Technology, Telecommunications, Electrical Engineering, Computer Science, Data Science or related.

Requirements for US Citizenship

Due to our research contracts with the US Federal Government, candidates for this position must be US citizens.

Required Release Type

Candidates must be able to obtain and maintain an active security clearance.

Benefits at GTRI

Extensive information on the GTRI benefits currently offered, including health and wellness, retirement plans, tuition reimbursement, time off and professional development, can be found at this link: https://benefits.hr.gatech.edu/.

Equal employment opportunities

The Georgia Institute of Technology (Georgia Tech) is an equal opportunity employer. The University is committed to maintaining a fair and respectful environment for all. For this reason, and in accordance with federal and state law, the policies of the Board of Regents, and University policies, Georgia Tech provides equal opportunity to all faculty, staff, students, and all other members of the Georgia Tech community, including applicants for admission and/or employment, contractors, volunteers, and participants in institutional programs, activities, or services. Georgia Tech complies with all applicable laws and regulations regarding equal opportunity in the workplace and in educational activities.

Georgia Tech prohibits discrimination, including discriminatory harassment, on the basis of race, ethnicity, ancestry, color, religion, sex (including pregnancy), sexual orientation, gender identity, gender expression, national origin, age, disability, genetics, or veteran status in its programs, activities, employment, and admissions. This prohibition applies to faculty, staff, students, and all other members of the Georgia Tech community, including affiliates, invitees, and guests. Georgia Tech further prohibits discrimination on the basis of citizenship status, immigration status, and national origin in hiring, firing, and recruiting, except when such restrictions are required to comply with law, regulation, executive order, or directive of the Attorney General, or when required by federal, state, or local government contract.

Statement of USG core values

The University System of Georgia is comprised of our 26 institutions of higher education and learning, as well as the System Office. Our USG Statement of Core Values are Integrity, Excellence, Accountability, and Respect. These values are the foundation for everything we do as an organization, and each USG community member is responsible for demonstrating and upholding these standards. More details about the USG Statement of Core Values and Code of Conduct are available in USG Board Policy 8.2.18.1.2 and can be found online at https://www.usg.edu/policymanual/section8/C224/#p8.2.18_personnel_conduct.

In addition, USG supports freedom of expression as stated in Board Policy 6.5 Freedom of Expression and Academic Freedom, which can be found online at https://www.usg.edu/policymanual/section6/C2653.