Embedded Security Research Engineer at Galois – Dayton, Ohio, United States

About Galois

Galois tackles the toughest problems in computer science. Our mission is to ensure trust in critical systems that protect the privacy and integrity of information in the real world. At the heart of this is the application of formal analysis techniques that allow systems to be modeled, analyzed and and mathematically proven correct to ensure that a system behaves exactly as we intend it to under all circumstances.

We are a community of researchers, engineers and operations people committed to creating reliability in critical systems across every functional area of ​​the organization. Our organization is highly collaborative and we strive to work from first principles, transparency, building deep trust, learning and innovation, and creating space for you to be authentically you. Our unique organizational structure allows us to adapt to the needs of the innovative projects we deliver.

We are employee-owned and strive to provide employees with a sense of freedom to pursue passions both inside and outside of work – whether it’s learning opportunities, career growth, sense of community or anything that gives you value as a person .

Research engineers at Galois design and develop advanced technologies for safety and security-critical systems, networks and applications. Engineers work in small team environments and must successfully interact with customers, partners and other employees in a highly cooperative, collaborative and intellectually challenging environment.

Our research engineers work in small teams and communicate successfully with customers, partners and other employees in a highly collaborative environment. We are looking for people who can imagine, learn, think and inspire.

Visit Life at Galois to learn more about our organizational structure.

About the role

Galois is looking for an embedded security research engineer to join our team! This role will focus on improving the state-of-the-art techniques for embedded security and exploitation development. You will use your practical and theoretical knowledge of embedded security, formal techniques and mathematics to research how to secure embedded platforms and create new tools and methodologies to ensure high levels of security.

Responsibilities

As an Embedded Security Research Engineer you have the following responsibilities:

• Requirements Gathering: Engage customers in a series of discussions to iteratively refine their technical needs and co-create innovative concepts to meet those needs.
• Architecture and design: building high-level architectural descriptions of software systems and refining them into program designs by creating architecture prototypes. Architectures should be designed with certainty in mind, determining where and how formal methods should be applied.
• Implementation: expanding design prototypes into a final product, ensuring robustness and ease of use.
• Formal verification: Use mechanical reasoning tools such as theorem provers and model checkers to demonstrate or analyze the desired security and correctness properties of systems.
• Testing and Validation: Setting up and regularly executing system, unit and regression tests, as well as conducting semi-formal validation and verification.
• Technology research and development: conducting speculative research and development of cutting-edge technology and incorporating that technology into product prototypes.
• Technical infrastructure development: developing (designing, implementing and maintaining) tools for use within Galois, as well as developing library code that can be shared between projects.

Key Qualifications

• Education:
• A minimum of a bachelor’s degree in electrical engineering, computer engineering, computer science, mathematics or equivalent is required.
• Required technical expertise:
• Background in cybersecurity exploitation (binary analysis, vulnerability discovery, hardware reverse engineering)
• Basic knowledge of hardware engineering languages ​​and platforms
• Familiarity with various formal methods, such as model checking, theorem proving, and program analysis, and demonstrated expertise in at least one such area.
• Fluency in one or more programming languages, particularly for developing high-reliability systems and/or security products.
• Required general skills:
• Must work well with clients, including building rapport, identifying needs and communicating with strong written, oral and presentation skills.
• Must be highly motivated and able to self-manage deadlines and quality goals.

• Preference will be given to candidates with one or more of the following technical expertise:
• Side channel analysis and research into anti-manipulation and/or experience in the sector
• Familiarity with cryptography application and theory

Security and citizenship requirement

The candidate must be a U.S. citizen without close and ongoing foreign contacts. Candidates must have and maintain a TS clearance and be eligible for SAP/SCI.

The candidate may not require a U.S. Government export license to provide access to export-controlled technology and software necessary to fulfill this role.

Location

This role requires in-person work from our Dayton, OH, area office and customer locations.

Advantages

We offer a robust benefits package to ensure the well-being of you and your family, including:

• Employee Stock Ownership Plan (ESOP)
• 401(k) retirement plan with 5% employer match and immediate vesting
• Fully paid health insurance and a reimbursement plan for dental and vision
• Health Savings Account (HSA) with generous employer contributions
• Mental health and wellbeing support through our employee assistance programme
• 5 weeks paid leave and 9 days paid company holiday per year
• 16 weeks fully paid parental leave (available for birth, adoption and foster care)
• 1 week of fully paid ‘Blue Sky’ innovation time each year to pursue your interests

For more information about our benefits, go to Working at Galois.

Compensation

The reward is based on the value of your results, not on your value as an employee or person. The compensation process, individual salaries and criteria for salary changes are transparent to the entire company.

To learn more about our forward-looking and transparent payment approach, visit Compensation.

Equal employment opportunities

Galois is an equal opportunity employer and does not discriminate in employment opportunities or practices based on race, ethnicity, national origin, ancestry, color, gender, gender identity or expression, sexual orientation, marital or parental status, pregnancy or childbirth, disability, age. , religion, belief, genetic information, veteran status, or any other characteristic protected by applicable federal, state, or local law. We encourage and respect different points of view and experiences, as these are essential to the innovation process. We strive to acquire, grow and sustain a diverse and inclusive workplace where principles and standards are applied equitably while supporting the needs and adjustments of the individual employee.

In accordance with the Americans with Disabilities Act (ADA) and federal and state laws, it is the policy of Galois, Inc. to provide reasonable accommodations when requested by a qualified applicant or employee with a disability, unless such accommodations would cause undue hardship. If you need a reasonable accommodation to complete the application, interview, complete a pre-employment test or otherwise participate in the employee selection process, please contact [email protected].