Report to Manager, Detections on the Research team and support the larger Shift5 technology organization
Understand how cyber threat actors could attack OT systems (particularly serial data networks and embedded OT devices) and emulate a wide variety of attacks
Develop software modules for Shift5 products to detect anomalies in OT systems and serial networks using C++/Rust/Golang/Python
Work with hardware, software, field, and research engineers and cross-functional teams to build real-time detection and prevention capabilities
Work with QA and Test Engineers to ensure end-to-end testing of detection modules and algorithms
Distinguish between anomalous and benign traffic within large repositories of serial bus data
Perform investigations of real-world customer anomalies to determine root cause and enhance detections
Design and deliver technical training, usage guides, and operational best practices for customers
Communicate technical information about cyber threats to technical and non-technical audiences
Contribute to frameworks describing threats to OT systems and provide a common language to share identified threats
Read specifications, technical standards, and interface control documents to understand analyzed data
Document work for technical and non-technical audiences, including engineering documentation and technical reports
Collaborate with vulnerability researchers to develop detection methodologies for novel attacks against OT systems
Assist with developing frameworks and testbeds to ensure efficacy of detections
Be ready to learn, be flexible, and engage in a wide variety of work in support of Shift5 priorities
Work from Shift5 HQ 2-3 days a week, and occasionally travel <10%
Requirements
BS or MS in Computer Science, Electrical Engineering, Computer Engineering, or equivalent
Experience in intrusion detection
Proficiency in software engineering principles using C/C++, Rust, Golang, and Python
Experience with DevOps tools (git, github actions, cargo package manager, Linux operating systems, docker/kubernetes, etc.)
Experience in embedded systems
Experience analyzing, characterizing and decoding serial data busses
Experience with developing or testing multi-layered protocol parser logic
Experience in cyber security concepts or fields
Experience in test driven development methodologies and practices
Ability to efficiently multitask and accommodate evolving priorities on demand
A US Government Security Clearance
Preferred: Familiarity with serial and embedded protocols such as MIL-STD-1553, ARINC 429, CAN, etc.
Preferred: Protocol or firmware reverse engineering experience preferred
Preferred: Penetration testing or red teaming experience preferred
Preferred: Experience developing AI/ML models and algorithms for anomaly detection
Benefits
Base Salary: $100,000-$175,000
Bonus program and equity in a fast-growing startup
Competitive medical, dental, and vision coverage for employees and their families
Health Savings Account with annual employer contributions
Employer-paid Life and Disability Insurance
Uncapped paid time off policy
Flexible work & remote work policy
Tax-deferred public transit benefits with Metro SmartBenefits (DC/MD/VA)
ATS Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.