Hardware Reverse Engineer - SME

Gridiron IT is seeking a SME Hardware Reverse Engineer. The Subject Matter Expert Hardware Reverse Engineers will provide specialized expertise in hardware reverse engineering focused on operational technology (OT) and industrial control systems. This position requires deep technical knowledge of proprietary hardware systems, exploitation methodologies, and defensive strategies to support forensic investigations of compromised edge devices and systems where threat actors have embedded malware deeply within hardware components.
This position focuses on the analytical and investigative aspects of hardware forensics, with particular emphasis on operational technology and industrial control systems. The ideal candidates will have strong reverse engineering skills and deep understanding of threat actor methodologies targeting critical infrastructure.

Responsibilities
- Conduct comprehensive hardware reverse engineering of OT and ICS devices
- Analyze network-edge devices and embedded systems compromised by advanced threats
- Perform deep-dive analysis of proprietary hardware targeted by adversaries
- Conduct reverse engineering, failure analysis, vulnerability analysis, and other research techniques to understand complex hardware systems, assess the functionality of components, and identify exploitation risks
- Identify and extract deeply embedded malware from hardware components
- Reverse engineer firmware and low-level software on embedded devices
- Collaborate with Nightwing research teams to leverage cutting-edge analytical capabilities
- Utilize and enhance KI2 system emulation capabilities for hardware analysis
- Document exploitation methodologies and defensive countermeasures
- Develop standard operating procedures for hardware forensics workflows
- Train CSD analysts on hardware reverse engineering techniques
- Provide expert consultation on edge device security and vulnerabilities
- Support forensic investigations in environments lacking EDR visibility
- Analyze proprietary communication protocols and embedded systems functions
- Identify hardware backdoors, implants, and malicious modifications
- Collaborate with electrical engineers on chip-off forensics procedures
- Provide reach-back support to operational analysts during active investigations
- Contribute to research initiatives on emerging hardware threats
- Document technical findings and intelligence for stakeholder dissemination

Qualifications
Required Skills:
- U.S. Citizenship
- Must have an active TS/SCI clearance
- Must be able to obtain DHS Suitability
- 10+ years of experience in hardware reverse engineering or embedded systems analysis
- Deep expertise in OT/ICS hardware platforms and vulnerabilities
- Ability to analyze novel or proprietary systems with limited documentation
- Strong communication skills for explaining complex technical findings
- Experience working collaboratively in research-oriented environments
- Strong experience with firmware reverse engineering and analysis
- Proficiency with reverse engineering tools (IDA Pro, Ghidra, Binary Ninja)
- Deep understanding of ARM, MIPS, PowerPC, and other embedded processor architectures
- Experience analyzing network-edge devices (routers, switches, firewalls, IoT devices)
- Knowledge of hardware debugging interfaces (JTAG, SWD, UART)
- Strong programming and scripting skills (Python, C, Assembly)
- Understanding of exploitation techniques targeting embedded systems
- Experience with malware analysis in hardware/firmware contexts
- Excellent analytical and problem-solving abilities

Desired Skills:
- Experience supporting federal cybersecurity or critical infrastructure protection programs
- Experience performing inspection, imaging, decapsulation, deprocessing, and other activities related to hardware reverse engineering and exploitation in a state-of-the-art microelectronics exploitation laboratory
- Background in offensive security or penetration testing of OT environments
- Advanced certifications in reverse engineering (GREM, GXPN, or similar)
- Experience with SCADA, PLC, RTU, and other industrial control components
- Knowledge of critical infrastructure sector technologies (energy, utilities, manufacturing)
- Familiarity with supply chain security and hardware implant detection
- Experience with system emulation platforms and virtual hardware analysis
- Understanding of threat actor TTPs targeting OT and edge devices
- Background in electronics manufacturing or hardware security research
- Experience with chip decapsulation and invasive hardware analysis techniques

Required Education:
Bachelor’s degree in Electrical Engineering, Computer Engineering or related discipline; Master’s degree or PhD preferred

Desired Certifications:
- DoD 8140.01 IAT Level III
- PMP

Clearance

TS/SCI REQUIRED FOR THIS ROLE. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Compensation and Benefits

Salary Range $90-105/hr (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)

Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs.

Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.

Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.