X86 Vulnerability and Exploit Analyst helping towards SOC Detection AIs
Budget: €750 – €1,500 EUR
As a cybersecurity and AI company, we want to develop a new next-generation SOC (security operations center) enterprise security sensor, i.e. a component which recognizes hacking and malware with AI. For that we need deep learning training data, in particular we’re looking for help with developing
a) Pairs of vulnerable x86 assembly/C code and corresponding exploit assembly/C code.
b) Typical infrastructure code, e.g. targeting the driver framework, UEFI/ROM, direct I/O, virtualization checks, etc.
c) JavaScript/PDF vulnerability and corresponding exploit analysis
Your skills:
1. Vulnerability and malware analysis skills for x86/JavaScript.
2. 0day exploits.
3. Static and dynamic code analysis and debugging tools like Metasploit, Burp Suite, angr, afl, BinaryAnalysisPlatform bap, KLEE, bindiff, BitBlaze, Ghidra-sre, x64dbg, IDA Pro, OllyDbg, AutoSploit, MetaSploit, Mimikatz, Kali Linux, snort, tcpdump, Wireshark, ClamAV, Malware analysis sandboxes like Cuckoo
4. Unpackers, PDF parsing, decompression & JS extraction.
5. Disassemblers, decompilers.
6. Analyzing sample exploits or their descriptions and extending them to provide all relevant details.
7. Analyzing binary patches regarding vulnerabilities and fixes.
8. Coding sample programs with vulnerable code and coding exploits, e.g. based on CERT info.
9. Application security, digital forensics, penetration testing, vulnerability assessment.
10. Ideally headless automation of tools.
The core task is nevertheless initially simple: Just taking existing vulnerability descriptions and exploits, gathering missing information by e.g. decompiling and reformatting the info with possibly additional comments to be optimally suited for machine learning. Later less experienced people or initially professionals could get higher payments.
We would be willing to employ you on a monthly basis with a salary as remote position. Thus please give your monthly salary as budget proposal. Please state your relevant experience regarding projects and tools.
If you have the necessary skills and experience, please submit your proposal for consideration.
a) Pairs of vulnerable x86 assembly/C code and corresponding exploit assembly/C code.
b) Typical infrastructure code, e.g. targeting the driver framework, UEFI/ROM, direct I/O, virtualization checks, etc.
c) JavaScript/PDF vulnerability and corresponding exploit analysis
Your skills:
1. Vulnerability and malware analysis skills for x86/JavaScript.
2. 0day exploits.
3. Static and dynamic code analysis and debugging tools like Metasploit, Burp Suite, angr, afl, BinaryAnalysisPlatform bap, KLEE, bindiff, BitBlaze, Ghidra-sre, x64dbg, IDA Pro, OllyDbg, AutoSploit, MetaSploit, Mimikatz, Kali Linux, snort, tcpdump, Wireshark, ClamAV, Malware analysis sandboxes like Cuckoo
4. Unpackers, PDF parsing, decompression & JS extraction.
5. Disassemblers, decompilers.
6. Analyzing sample exploits or their descriptions and extending them to provide all relevant details.
7. Analyzing binary patches regarding vulnerabilities and fixes.
8. Coding sample programs with vulnerable code and coding exploits, e.g. based on CERT info.
9. Application security, digital forensics, penetration testing, vulnerability assessment.
10. Ideally headless automation of tools.
The core task is nevertheless initially simple: Just taking existing vulnerability descriptions and exploits, gathering missing information by e.g. decompiling and reformatting the info with possibly additional comments to be optimally suited for machine learning. Later less experienced people or initially professionals could get higher payments.
We would be willing to employ you on a monthly basis with a salary as remote position. Thus please give your monthly salary as budget proposal. Please state your relevant experience regarding projects and tools.
If you have the necessary skills and experience, please submit your proposal for consideration.