Laboratory researcher job description

**_Job Title:_**

Trellix Threat Labs - Senior Vulnerability Researcher

**_Role Overview:_**

The Trellix Labs advanced threat research team focuses on leading edge security research. The larger organization is tasked with discovery and analysis of critical vulnerabilities, malicious actors, campaigns, and cutting-edge attack techniques. This position is focused on zero-day vulnerability research and analysis.

The advanced research team focuses on leading edge security research. The larger organization is tasked with discovery and analysis of critical vulnerabilities, malicious actors, campaigns, and cutting-edge attack techniques. This position is focused on zero-day vulnerability research and analysis. It will be challenging yet highly rewarding. Candidates will be expected use their development and analytical skills to drive meaningful vulnerability research while exploring new research tools and techniques. A successful candidate will be able to mentor junior researchers, drive new research and approach problems from multiple angles with little direction while at the same time effectively communicating their process and findings to others.

As a senior member of the team, the researcher can expect a certain degree of freedom in research target selection aligned with their expertise and interests while still within the verticals the team is keen on exploring. Depending on the scope of the selected targets, research projects can spread from weeks to months and often involve collaboration with one or more teammates. Researchers are expected to participate in the Trellix responsible vulnerability disclosure process for each finding. Sharing findings internally and publicly is equally important. This can take the form of blog posts and/or conference talks once the responsible disclosure process is concluded.

Requirements:

Strong procedural programming skills, and extensive development experience in OO languages including C/C+Highly proficient in one or more scripting language such as JavaScript, Python, Perl, Bash, or Ruby.

Strong *nix and Windows experience. Candidates should be very comfortable using command line tools, and understanding operating system essentials such as memory management, kernel and user mode, 3rd party software/drivers, and more.

Networking experience - ability to read and dissect network traffic and packet structure, ideally experience using network tools such as Wireshark, Scapy, and more.

Solid understanding of vulnerabilities including techniques, mitigations, and exploitation

History of original vulnerability disclosure findings - discovery, analysis and ideally exploitation

Proficiency in reverse engineering - knowledge of assembly, various architectures such as ARM, MIPS, x86 etc., static/dynamic

Experience using industry security tools: IDA Pro/Ghidra, Windows/Linux debuggers, Wireshark and much more

Strong technical writing skills - experience delivering technical content in a variety of formats including blogs, whitepapers, conference presentations, and more

Researcher mentality - driven to find and explore security issues or implementations, and corresponding ability to analyze and present findings

Candidates should be able to adapt to new problems and learn new skills to solve them

Ability to interface with multiple internal and external entities for collaboration and problem solving

Beneficial, but not required:

• Machine learning, data science experience using multiple industry standard algorithms and concepts (DNN, Linear/Logistic Regression, reinforcement learning, etc.) and tools (Anaconda, Python Notebooks, Jupyter, etc...)

• Cloud and/or mobile vulnerability research or analysis experience

• Previously presented at mainstream conferences such as Blackhat, Defcon, etc.

**_Company Benefits and Perks:_**

We work hard to embrace diversity and inclusion and encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees.

+ Pension and Retirement Plans

+ Medical, Dental and Vision Coverage

+ Paid Time Off

+ Paid Parental Leave

+ Support for Community Involvement

We're serious about our commitment to diversity which is why we prohibit discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.

Come create the technology that helps the world act together

Nokia is committed to innovation and technology leadership across mobile, fixed and cloud networks. Your career here will have a positive impact on people's lives and will help us build the capabilities needed for a more productive, sustainable, and inclusive world.

We challenge ourselves to create an inclusive way of working where we are open to new ideas,empowered to take risks and fearless to bring our authentic selves to work.

The team you'll be part of

Nokia Bell Labs is the world-renowned research arm of Nokia, having invented many of the foundational technologies that underpin information

and communications networks and all digital devices and systems. This research has produced nine Nobel Prizes, five Turing Awards

and numerous other awards.

The Nokia Bell Labs ISE Lab (Integrated Solutions and Experiences) is responsible forresearching,designing, building, integrating and delivering

disruptive and best-in-class solutions and experiences that leverage the Bell Labs Research assets and innovations across multiple complex

technology areas. We are looking for a strong and enthusiastic person with background, experience, and interests in RF networks and platforms

to join a growing research group in Bell Labs that conducts research in distributed and networked control of autonomous robots.

What you will learn and contribute to

The work involves building large-scale distributed software systems, coming up with innovative architectures and algorithms, conducting

experiments, and demonstrating use cases that have either scientific or business value. The person joining the team will be expected to be an

independent thinker, capable of driving the research directions, implementing the proposed systems under minimal instruction, and collaborating

with peers to move the project towards the common objective.

Our primary objective is to tackle, understand and solve some of the hardest problems in industrialization - localization, navigation, and task

planning and coordination. We build robotic systems and supporting infrastructure (network and edge cloud computing) from ground

up, deploy existing and our own control algorithms, and run systems in highly distributed networked environment to perform Industry 4.0 tasks

The person will be part of the larger Bell Labs Research community, with a vision to positively impact the way we will work and live in the next

generation.

Key Responsibilities / Functions

* Contribute own ideas and use them in collaboration with peers to drive research directions.
* Implement large-scale distributed and networked software systems.
* Invent and Implement new robotic algorithms and integrate them with our existing code base
* Design, develop, deploy, and maintain network and server infrastructure for Industry 4.0 machine control
* Create technologies with potential of becoming a future business for the company

Your skills and experience

While software is a predominant aspect of the system we are building, the candidate must be a versatile person that understands the hardware

concepts (electronics and mechanics) relevant for robotics and can perform hands-on work in that area when needed. Good understanding of

relevant mathematical concepts is an absolute must.

Candidates should possess a subset of the following skills either through previous employment experience or through university academic research:

* Strong knowledge of networking, system software, operating systems, distributed systems.
* Strong software development skills in Python, C/C++, shell scripting, Git.
* Strong mathematical background relevant for robot control, navigation, localization, vision, etc.
* Ability to develop and debug the system across all layers of hardware and software.
* Excellent verbal and written communication skills and fluent in English
* Can work in the "gray zone" when there is uncertainty or lack of clarity. Very comfortable with innovation risk taking

Education

Master's/PhD degree in a relevant engineering field such as Computer Science, Electrical Engineering, Mechanical Engineering or

Mathematics from a leading college/university.

What we offer

Nokia offers flexible and hybrid working schemes, continuous learning opportunities, well-being programs to support youmentally and physically,

opportunities to join and get supported by employee resource groups, mentoring programs and highly diverse teams with an inclusive culture

where people thrive and are empowered. Nokia is committed to inclusion and is an equal opportunity employer. Nokia has received the following

recognitions for its commitment to inclusion & equality:

* One of the World's Most Ethical Companies by Ethisphere
* Gender-Equality Index by Bloomberg
* Workplace Pride Global Benchmark
* LGBT+ equality & best place to work by HRC Foundation

At Nokia, we act inclusively and respect the uniqueness of people. Nokia's employment decisions are made regardless of race, color, national or

ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status,disability, protected veteran status or other

characteristics protected by law. We are committed to a culture of inclusion built upon our core value of respect

.

Join us and be part of a company where you will feel included and empowered to succee

Additional Information

* Vaccination Requirements : FOR US ONLY: Nokia employees, wherever required by law or contractual obligation, must receive a COVID-19 vaccination or an otherwise approved accommodation based upon applicable law.