Computer Scientist / Engineer (Vulnerability Research)

at  Oak Ridge National Laboratory

OVERVIEW:

As a U.S. Department of Energy (DOE) Office of Science national laboratory, Oak Ridge National Laboratory (ORNL) has an extraordinary 80-year history of solving the nation’s biggest problems. We have a dedicated and creative staff of over 6,000 people! Our vision for diversity, equity, inclusion, and accessibility (DEIA) is to cultivate an environment and practices that foster diversity in ideas and in the people across the organization, as well as to ensure ORNL is recognized as a workplace of choice. These elements are critical for enabling the execution of ORNL’s broader mission to accelerate scientific discoveries and their translation into energy, environment, and security solutions for the nation.
We are seeking a Computer Scientist or Engineer with a focus on Vulnerability Research who will support the Cyber Resilience and Intelligence Division in the National Security Science Directorate at Oak Ridge National Laboratory (ORNL).

BASIC QUALIFICATIONS:

• Requires a bachelor’s degree in computer science, computer engineering, or related field and a fundamental understanding of cyber security principles, tools, and operational applications.

PREFERRED QUALIFICATIONS:

• Current experience writing software. Most relevant languages: C, C++, Python, and Java.
• Basic binary literacy is important. This includes understanding how software is architected, language characteristics, binary formats, and operating systems.
• Familiarity with static and dynamic binary analysis techniques (e.g., fuzzing) and reverse engineering (e.g., Ghidra or Ida Pro).
• Experience auditing source code and disassembly a plus.
• Familiarity with embedded systems preferred.
• Prior use and familiarity with web or network related tools, e.g., burpsuite and wireshark a plus.
• Demonstrated desire and ability to acquire new knowledge and learn new skills.
• Demonstrated interpersonal, verbal and written communication skills.
• Ability to develop plans to address complex problems, be proactive, work independently, and contribute to a larger team.
• Participation in capture-the-flag events, or cyber challenge events a plus.
• Ability to function well in a fast-paced research environment, set priorities to accomplish multiple tasks within deadlines, and adapt to ever changing needs

• Support national security agendas as they relate to the identification and mitigation of software vulnerabilities used in defense, energy, and critical infrastructure assets.
• Research, develop and improve tools and techniques used to identify and mitigate vulnerabilities in critical systems.
• Maintain awareness and understanding of cyber security research and events.
• Contribute material to reports generated for project sponsors.
• Assist in the development of research proposals related vulnerability science.
• Promote ORNL/partners cyber security research and development capabilities as they apply to the national security community.
• Present material and provide advice to technical audiences, leadership and sponsors on cyber security issues, research, and programs.
• Identify and articulate ORNL capabilities and customer requirements to internal and external technical audiences, leadership, and sponsors.
• Deliver ORNL’s mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote diversity, equity, inclusion, and accessibility by fostering a respectful workplace - in how we treat one another, work together, and measure success.
  All team members deliver ORNL’s mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote diversity, equity, inclusion, and accessibility by fostering a respectful workplace – in how we treat one another, work together, and measure success.