Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
 
Location
Country: United States
State/Prov: Maryland
City: Columbia
Position
Position/Title: Security Researcher
Position Type: Permanent F/T
Closing Date: 2008-08-03
Job Description: Sourcefire, Inc., the world leader in intrusion prevention, is transforming the way organizations manage and minimize network security risks with its 3D Approach - Discover, Determine, Defend - to securing real networks in real-time. The company's ground-breaking network defense system unifies intrusion and vulnerability management technologies to provide customers with the most effective network security available. Founded in 2001 by the creator of SnortB., Sourcefire is headquartered in Columbia, MD and has been significantly recognized for its ability to lead and innovate by customers, media, and industry analysts - with more than 16 awards and accolades since January 2005.B Most recently, the company was listed in the Leaders Quadrant of Gartner's "Magic Quadrant for Network Intrusion Prevention System Appliances" report and the Sourcefire 3D System was named "Best Security Solution" at the 2006 SC Magazine Awards. At work in leading Fortune 1000 and government agencies, the names Sourcefire and founder Martin Roesch have grown synonymous with innovation and intelligence in network security.

Basic Purpose

This role is primarily responsible for conducting binary analysis and vulnerability analysis of closed source applications. Additionally the researcher will be responsible for locating new vulnerabilities in both open source and closed source applications. The researcher will work on a team of highly motivated reverse engineers and will be responsible for quickly disassembling and locating vulnerabilities in binary patches, custom applications, and embedded applications. The resulting research will be recorded and used to produce exploits, detection mechanisms for Sourcefire products, and detailed risk assessments.

Essential Duties and Responsibilities

Reverse engineering of binary patches and closed source applicationsSource code auditsDevelopment of new protection mechanisms and contentMalware analysisDiscover new vulnerabilities
Job Requirements: Essential Education, Skill and Environment:

Education and Work Experience

3+ Years experience conducting code audits

3+ Years experience reversing binary applications, patches, or malware

Bachelor in Computer Science or equivalent experience

Required Knowledge and Skills

Experience with WinDbg, OllyDbg, GDB, or similar debugger

Experience with IDA Pro and BinDiff, SoftIce, WinDasm, or similar disassembler

Experience auditing C, Perl, Python, and Ruby

Experience reading and debugging assembly

Preferred Knowledge and Skills

Experience with Snort & other network security tools

Experience with network services and applications

Experience with open or closed source fuzzing or fault injection frameworks

Experience with Snort or other Intrusion Detection/Prevention System

Work Conditions

Works closely with software reverse engineers and research analysts to quickly develop snort rules and other protection mechanisms

Moderate to high levels of stress may occur at times

Fast paced and rapidly changing environment

Extremely talented and experienced team members and mentors

No special physical requirements

This position is located at our Headquarters in Columbia, MD and we're willing to relocate for the right individuals.
Contact Information
Contact Directions: You can learn more information on Snort at www.snort.org

Please apply online at our career center:

http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&jobid=140893&company_id=15640&jobboardid=488

SourceFire is an Equal Opportunity Employer

****No Agencies Please*****
Company: Sourcefire Inc.
First Name:
Last Name:
Title:
Email:

 







 

Privacy Statement
Copyright 2007, SecurityFocus