Reverse Engineering

Reverse Engineering Jobs

8 jobs found

Today

Product Security Engineer, SEAR

Apple Seattle, WA

Seattle, WA

Today

$123k - $214k/yr Full time Application Security Cyber Security Cybersecurity Operations

Apply Now

Job Description

On Apple’s Product Security Team, you will help investigate and respond to security issues across Apple’s ecosystem, with a focus on securing iOS, tvOS, watchOS, and macOS. The work combines hands-on analysis with practical engineering, supporting rapid response to critical issues while improving how security findings are discovered and acted on.

This role is based in Seattle, WA and is onsite, supporting product security efforts that span multiple operating systems and engineering partners.

Salary: USD 122,700 - 214,300 per year.

What you’ll do

Participate directly in Apple’s response to critical security issues as they arise.
Work from reverse engineering an exploit to deliver clear, insightful vulnerability analysis.
Create innovative tools intended to help identify security bugs.
Collaborate with engineering teams on software issues informed by security findings.

Requirements

Programming skills in one or more of C, C++, or Objective C to build robust security automation systems.
Familiarity with common AI capabilities, including function calling, and how they can be applied to security use cases.
Experience deploying systems in production using containerization, CI/CD pipelines, and monitoring tools.
Proven ability to analyze and investigate security issues using systematic approaches and tooling.
Understanding of security principles, including vulnerability classes, exploit techniques, and common attack vectors.
Strong communication skills for working across diverse technical teams and stakeholders.

Technologies

C
C++
Objective C
Function calling
Containerization
CI/CD pipelines

Preferred qualifications

Experience developing or leveraging security tools such as fuzzers, static/dynamic analyzers, or vulnerability management platforms.
Field experience in vulnerability research, incident response, or security operations.
A track record of shipping tools to large user bases in enterprise environments.

Benefits

Comprehensive medical and dental coverage.
Retirement benefits.
Discounted products and free services.
Reimbursement for certain educational expenses, including tuition.
Discretionary bonuses or commission payments, as well as relocation.
Opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs.
Eligibility for discretionary restricted stock unit awards.
Option to purchase Apple stock at a discount by participating in the Employee Stock Purchase Plan.

View full job page →

26d ago

Staff Security Engineer, Incident Response

Databricks San Francisco, CA

San Francisco, CA

26d ago

Full time Ai Security Cyber Security Data Security

Apply Now

Job Description

Databricks is hiring a Staff Security Engineer to strengthen its Security Incident Response (IR) organization. As an individual contributor on the IR team, you will support high-priority incident handling across a distributed 24x7 operations and on-call schedule, combining incident response, analysis, and forensics with automation and emerging AI-driven capabilities.

This role emphasizes technical leadership during active events, as well as longer-term improvements to how the team detects, triages, and responds to security events across modern cloud and enterprise environments.

Responsibilities

Respond to incidents as part of a distributed 24x7 operations and on-call schedule.
Triage and respond to security events and alerts, driving quick and effective containment.
Conduct analysis and forensics across a range of data sources to determine event timelines and impact.
Provide technical leadership and influence team direction.
Develop solutions leveraging AI and agentic platforms to deliver autonomous capabilities, expedite your work, and scale team impact.
Communicate technical decisions through design docs and tech talks.
Mentor junior security responders using security guidance, design reviews, and code reviews.

Requirements

Active or current US GOV Secret clearance eligibility; Top Secret preferred.
Bachelor's Degree and 7+ years of Incident Response experience, or a Master's Degree and 5+ years of Incident Response experience.
Cloud security expertise in at least one of AWS, GCP, or Azure, with proficiency in the others.
Proficiency in AI/LLM and agentic capabilities, with preference for experience building and operating agentic systems in a security setting.
Broad security subject matter expertise.
Expertise in core incident response skills such as DFIR, Reverse Engineering, Traditional Network Security, Storage and access security, Sandboxing, and Compute security.
Experience with Enterprise Security and SaaS applications.
Working knowledge of SIEM and SOAR.
Experience building incident response tooling, scripting language skills, and experience with AI coding tools.

Technologies

AWS, GCP, Azure
AI, LLM, agentic platforms
SIEM, SOAR
DFIR, Reverse Engineering, Sandboxing

View full job page →

2mo ago

Security Engineer III, Exploitation Analyst / Incident Responder

Deloitte Rosslyn, VA

Rosslyn, VA

2mo ago Closed

$103k - $189k/yr Full time Cyber Forensics Cybersecurity Tools Endpoint Detection & Response

This position is no longer accepting applications (closed Sep 24, 2026).

Job Description

On Deloitte’s Cyber Defense & Resilience team, the Security Engineer III will serve as a cyber exploitation analyst and incident responder, supporting enterprise security activities from threat analysis through incident investigation and reporting. This role focuses on understanding attacker behavior, assessing vulnerabilities, and translating technical findings into practical recommendations.

Key Responsibilities

Monitor networks, systems, and applications for indicators of compromise and analyze threat data to identify malicious activity.
Investigate security incidents by collecting and analyzing logs, memory artifacts, and network traffic, and support containment, eradication, and recovery efforts.
Identify and evaluate vulnerabilities across systems, networks, and applications, then recommend remediation actions based on risk and exploitability.
Analyze malware, exploits, and adversary tools, including reverse engineering malicious code and simulating adversary techniques in controlled environments.
Produce technical reports, briefings, and documentation that summarize findings, methodologies, and recommendations for stakeholders.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance.
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response.
Experience analyzing advanced persistent threats (APTs), malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra.
Experience performing vulnerability assessments, penetration testing, or red team activities.
Experience with network traffic analysis, log analysis, digital forensics, and operating systems including Windows, Linux, and macOS, as well as common network protocols.
Experience scripting with Python, PowerShell, or Bash.
Experience using security monitoring tools including SIEM, IDS, IPS, and EDR.
Ability to travel up to 20% on average based on work, clients, and sectors served.
Ability to work client onsite or at Deloitte office for up to 5 days a week.
Industry certifications such as GIAC, CISSP, or CompTIA Security+ are required.
Must be legally authorized to work in the United States without the need for employer sponsorship, now or in the future.

Technologies and Frameworks

IDA Pro, Ghidra
Python, PowerShell, Bash
SIEM, IDS, IPS, EDR
Windows, Linux, macOS
MITRE ATT&CK

Additional Skills

Ability to work independently and collaborate as part of a team.
Effective written and verbal communication skills.
Meticulous attention to detail and ability to deliver high-quality work products.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams.
Ability to manage and prioritize multiple tasks in a fast-paced environment.
Strong interpersonal skills and professional demeanor.
Ability to meet deadlines.
Ability to provide clear guidance to others.

Preferred Experience

Experience supporting incident response in government, defense, intelligence, or large enterprise environments.
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts.
Experience mapping threat activity to the MITRE ATT&CK framework.
Experience developing or tuning detections for SIEM or EDR platforms.
Industry certifications such as GIAC, CISSP, or CompTIA Security+.

Location and Compensation

Location: Rosslyn, VA 22209 (onsite).
Compensation: USD 102,500 - 188,900 per year.

Minimum Experience

2+ years of relevant experience.

View full job page →

2mo ago

Security Engineer III, Exploitation Analyst / Incident Responder

Deloitte Rosslyn, VA

Rosslyn, VA

2mo ago Closed

$103k - $189k/yr Full time Cybersecurity Tools Endpoint Security Exploit Analysis

This position is no longer accepting applications (closed Sep 24, 2026).

Job Description

Deloitte is hiring a Security Engineer III focused on cyber exploitation analysis and incident response for work in Rosslyn, VA.

Responsibilities

Monitor networks, systems, and applications for indicators of compromise and analyze threat data to identify malicious activity
Investigate security incidents by collecting and analyzing logs, memory artifacts, and network traffic
Support containment, eradication, and recovery activities during incident response
Identify and assess vulnerabilities across systems, networks, and applications
Recommend remediation actions based on risk and exploitability
Analyze malware, exploits, and adversary tools, including reverse engineering malicious code
Simulate adversary techniques in controlled environments
Produce technical reports, briefings, and documentation covering findings, methods, and recommendations for stakeholders

Requirements

Ability to work independently and collaborate with a team
Strong written and verbal communication skills
Meticulous attention to detail and commitment to quality output
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast paced, dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related technical field
Active Top-Secret Clearance
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response
Experience analyzing APTs, malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra
Experience performing vulnerability assessments, penetration testing, or red team activities
Experience with network traffic analysis, log analysis, digital forensics, and operating systems including Windows, Linux, and macOS
Experience with common network protocols, scripting languages including Python, PowerShell, and Bash, and security monitoring tools including SIEM, IDS, IPS, and EDR
Ability to travel up to 20% on average
Willingness to work client onsite or at a Deloitte office up to 5 days a week
Industry certifications such as GIAC, CISSP, or CompTIA Security+ is required
Legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

IDA Pro
Ghidra
Python
PowerShell
Bash
SIEM
IDS
IPS
EDR
Windows
Linux
macOS
MITRE ATT&CK

Team

Deloitte Cyber Defense & Resilience helps clients defend against advanced threats through security operations transformation, monitoring technology, data analytics, and threat intelligence
Supports management and protection of dynamic attack surfaces and provides rapid crisis and cyber incident response to help clients prepare for, respond to, and recover from business disruptions

Preferred

Experience supporting incident response in government, defense, intelligence, or large enterprise environments
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts
Experience mapping threat activity to the MITRE ATT&CK framework
Experience developing or tuning detections for SIEM or EDR platforms
Industry certifications such as GIAC, CISSP, or CompTIA Security+

Location and Compensation

Location: Rosslyn, VA (onsite)
Estimated wage range: $102,500 - $188,900 per year

Incentive Program

May be eligible for a discretionary annual incentive program
Award, if any, depends on individual and organizational performance

View full job page →

2mo ago

Embedded Software Engineer

Berla Corporation Annapolis, MD

Annapolis, MD

2mo ago Closed

$125k - $150k/yr Full time Android Cyber Security Cybersecurity Tools

This position is no longer accepting applications (closed Sep 18, 2026).

Job Description

Berla Corporation is hiring an Embedded Software Engineer in Annapolis, MD (onsite) to support a research team building forensic tooling for automotive vehicle systems. This role combines embedded firmware and operating system analysis with practical hardware access and repeatable extraction methods, helping translate technical findings into reliable capabilities for downstream use.

Responsibilities

Extract and analyze embedded firmware and operating system software from automotive systems to identify key artifacts, including data structures, storage formats, and protection mechanisms
Access embedded devices using hardware and debug interfaces to acquire firmware and memory and recover data from locked, damaged, or protected devices using appropriate techniques
Work with embedded operating systems including Linux, QNX, and Android
Address device protections where required, including secure boot and encryption, and obtain ADB and root access to target systems as part of analysis
Decrypt and analyze encrypted SQL databases and proprietary storage formats to recover and interpret structured data
Analyze recovered data to identify, correlate, and validate artifacts of interest, and document findings for downstream forensic use
Develop repeatable, forensically sound extraction and decoding methods while maintaining clear documentation of methodologies, target hardware, and attack surfaces
Build automation to parse, decode, and validate recovered data at scale
Maintain a code repository aligned with industry best practices as directed by leadership
Collaborate with engineers, analysts, and product managers to prioritize targets and move research into supported product capabilities

Requirements

At least 3 years of experience in embedded software, embedded systems, or embedded security
Experience with binary analysis, including disassembly and decompilation, plus reading assembly on embedded-class architectures
Familiarity with embedded systems based on Linux, QNX, and Android, including how they store and protect data
Hands-on hardware skills, including working with debug interfaces, board-level rework, and signal capture
Familiarity with embedded communication buses and the ability to observe and interpret device traffic
Proficiency in a scripting or programming language used to build parsing and automation tooling
Solid understanding of file systems, data encoding, encrypted SQL databases, and cryptographic and secure-boot concepts
Strong analytical and data analysis skills, including interpreting, correlating, and validating data and working through undocumented systems
Experience maintaining code in a version-controlled repository following established best practices
Clear communication skills, comfort working cross-functionally, and the ability to travel locally and internationally as needed

Technologies

Linux, QNX, Android, ADB, SQL

Benefits

401(k)
401(k) matching
Dental insurance
Flexible schedule
Health insurance
Life insurance
Paid time off
Vision insurance

Base salary range: $125,000 - $150,000 per year

Location: Annapolis, Maryland

Type: Full Time

Work location: In person

View full job page →

2mo ago

Product Design Engineer

ITT Inc. - English US Chicago, IL

Chicago, IL

2mo ago Closed

$85k - $127k/yr Full time 3D CAD 3d Design 3d Scanning

This position is no longer accepting applications (closed Sep 9, 2026).

Job Description

ITT Inc. is hiring a Product Design Engineer in Chicago, IL (onsite) to support re-engineering efforts by collecting accurate product and manufacturing data and translating it into technical designs. This role includes on-site field data acquisition and product design and development, with frequent domestic and international travel.

Responsibilities

Provide technical support to machinist, customers, outside sales, customer service, purchasing, and other departments within ProCast.
Gather and process technical data to support re-engineering parts for manufacturing through the ProCast business.
Collect and manage measurements, sketches, laser scanning data, 3D models, 2D machine drawings, BOM’s, and routings.
Receive gathered and processed information at the facility’s current location or at a customer’s site.
Conduct re-engineering data acquisition using a FARO arm and 3D scanner.
Create 2D machine drawings.
Perform 3D CAD modeling in Pro/E or Creo.
Complete 2D to 3D conversion tasks.
Perform on-site field data acquisition, including scanning activities.
Carry out product design and development and related scanning work.

Required Education and Experience

Bachelor’s Degree.
Two to five years’ experience required (minimum 2 years).

Qualifications

Basic computer and computational skills in Word, Excel, and Power Point are required.
Strong technical writing and communication skills.
Work area flexibility and adaptability.
Creative approach and willingness to improve.
Physical strength to support the role’s physical demands, including the ability to lift up to 40 lbs and spend extended periods on your feet.
Strong organization and problem-solving skills, including decision-making and multi-tasking abilities.
Fluent English (written and spoken).
Due to frequent international and domestic travel, any additional language other than English is a plus.
Experience or proficiency in 3D CAD modeling (Pro/E or Creo) and 2D CAD drawing.
Basic knowledge of pump operation is preferred.
FARO arm experience is preferred.
General operations of a scientific calculator.
Basic trigonometry and algebra knowledge.

Tools and Technologies

FARO arm, 3D scanner
Pro/E, Creo
Word, Excel, Power Point
Scientific Calculator

Location and Travel

The position is based in Chicago, IL (onsite), with required domestic and international travel for on-site field data acquisition.

Compensation

Salary range: USD 85,000 - 126,800 per year.

View full job page →

3mo ago

Principal / Senior Principal Embedded Systems Security Engineer

Northrop Grumman Baltimore, MD

Baltimore, MD

3mo ago Closed

$120k - $179k/yr Full time Senior Anti Tamper Cyber Security

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Northrop Grumman is hiring an Embedded Systems Security Engineer in Baltimore, MD with 100% onsite work. This role supports sensor payload and mission security efforts through hands-on engineering, cybersecurity planning, and ST&E support, with opportunities to contribute to full life cycle development and domain growth. The position offers a comprehensive benefits package, company paid holidays, PTO, savings options, and training and development support.

What You’ll Do

Implement and maintain compliance with government policies (including JSIG and DAAPM) by reviewing process tailoring needs and approving documented procedures.
Perform analyses to validate existing security requirements and define additional safeguards to strengthen overall system security.
Support formal Security Test and Evaluation (ST&E) activities through pre-test preparation, participation during testing, result analysis, and development of required reports.
Document outcomes from Assessment and Authorization activities, technical work, and coordination efforts while preparing and maintaining Security Plans and updating Plan of Actions and Milestones (POA&M).
Oversee and communicate analyses and modifications related to system, subsystem, or sensor exportability, ensuring alignment with international standards.
Work with program teams and global Business Development personnel to incorporate international requirements and features into design processes and support product line initiatives for global markets.
Apply full life cycle experience including architecture design, trade studies, cybersecurity requirements formulation, detailed design, unit testing, system testing, and validation and verification practices.
Contribute to strategic planning for cybersecurity technology development to align with global strategic priorities and influence current and future policies.
Use reverse engineering techniques to architect and validate effective cybersecurity solutions.
Participate in communities of practice to strengthen domain knowledge and support continuous professional growth.

Basic Qualifications

Principal: Bachelor’s degree with 5 years of experience, or Master’s with 3 years, or PhD with 1 year in Science, Technology, Engineering, or Mathematics (or related technical fields). An additional 4 years of experience may be considered in lieu of a degree.
Senior Principal: Bachelor’s degree with 8 years of experience, or Master’s with 6 years, or PhD with 4 years in Science, Technology, Engineering, or Mathematics (or related technical fields). An additional 4 years of experience may be considered in lieu of a degree.

Required Qualifications

U.S. Citizenship is required.
Current/active DoD Secret Clearance.
Ability to obtain or maintain Special Access Program (SAP) access prior to start.
2 years of system engineering experience with DoD-based platforms, sensors, and/or subsystems, including areas such as EO/IR, Embedded Software or Cryptography, Satellite, architecture development, hardware design, RF, radar, and undersea sensors.
2 years of experience with requirements development, derivation, system integration and test, and validation and verification.
2 years of experience with Anti-tamper, Reverse Engineering and/or Risk Management Framework and cyber resiliency.

Technologies

JSIG, DAAPM, ST&E, POA&M
Risk Management Framework, Cyber Resiliency, Anti-tamper, Reverse Engineering
Cryptography, EO/IR, RF, Radar, Undersea Sensors, Satellite
SAP

Benefits

Health Plan
Savings Plan
Paid Time Off
Additional benefits including Education Assistance, Training and Development, and a 9/80 Work Schedule (where available)
Comprehensive benefits package including health insurance coverage, life and disability insurance, Company paid holidays, and PTO for vacation and/or personal business

Clearance, Travel, and Position Details

Clearance required for start: Yes
Clearance type: Secret
Travel: Yes, 10% of the Time
Work location: 100% onsite
This position is contingent upon contract award, successful transfer of an active DoD Secret Clearance, and the ability to obtain Special Program Access.
May be filled as a Principal Embedded Systems Security Engineer or Senior Principal Embedded Systems Security Engineer.

Relocation Assistance

Relocation assistance may be available.

Preferred Qualifications

Advanced degrees in Science, Technology, Engineering, or Mathematics (or related technical fields).
Active Top Secret Clearance or higher.
Experience with Hardware (Firmware) Assurance, Software Attack Surface Analysis Report, Select Software/Firmware Encryption, and Secure Key Handling.
Experience identifying and mitigating software assurance vulnerabilities, and performing integration testing of mitigation or resolution.
Experience contributing to and/or delivering technical presentations to internal and external customers.

View full job page →

3mo ago

CNO Software Engineer

General Dynamics Information Technology Annapolis Junction, MD

Annapolis Junction, MD

3mo ago Closed

$207k - $279k/yr Full time CI/CD Cno Embedded Systems

Reverse Engineering Jobs

Get Reverse Engineering Jobs alerts