Payrate: $80.00 - $85.00/hr.
Summary:Build and advance a next-generation firmware security analysis platform within Azure Hardware Security. This system combines large language models (LLMs), compiler technology, and automated fuzzing to identify security vulnerabilities in firmware at scale, significantly reducing the effort required for manual security assessments.
The project addresses a critical industry challenge: much of today's firmware is developed by third parties and has not historically been analyzed with the same rigor as first-party software. By automating key aspects of firmware security review, this platform enables repeatable, scalable analysis that improves overall security posture while supporting a broader ecosystem of hardware and firmware providers.
As a member of the engineering team, you will work directly with security researchers, compiler engineers, and platform developers to build production-quality tooling spanning LLVM, fuzzing infrastructure, static analysis, AI-assisted automation, and open-source engineering practices.
Responsibilities:- Build and Enhance Security Analysis Pipelines:
- Develop preprocessing pipelines that compile C/C++ firmware code into LLVM Intermediate Representation (IR).
- Implement and maintain LLVM-based transformations to make firmware suitable for off-target analysis and fuzzing.
- Create and improve code-analysis workflows, including call-graph extraction, metadata generation, and static-analysis integrations.
- Design and maintain systems that generate and execute fuzzing campaigns using modern fuzzing frameworks and AI-assisted techniques.
- Improve crash triage systems that automatically identify, deduplicate, and analyze security findings.
- Develop automated mechanisms to classify code semantics and improve analysis accuracy.
- Security Automation and Tooling:
- Build scalable automation that combines compiler infrastructure, security tooling, and AI-driven workflows.
- Enhance vulnerability detection pipelines and help reduce false positives through improved analysis techniques.
- Improve reporting systems that transform raw security findings into actionable engineering insights.
- Validate analysis approaches across multiple firmware targets and environments.
- Improve system reliability, modularity, test coverage, and CI/CD automation.
- Create developer documentation, onboarding guides, and architectural references.
- Support dependency review, reproducible builds, and general open-source readiness activities.
- Help establish contribution workflows, issue triage practices, and release processes for external contributors.
- Write clean, maintainable, and well-tested code.
- Participate in design reviews and technical architecture discussions.
- Collaborate closely with engineers across security, hardware, and platform teams.
- Contribute to long-term technical strategy and platform evolution.
Required Qualifications:- Bachelor's degree in Computer Science, Computer Engineering, or a related technical field, or equivalent practical experience.
- Strong professional experience developing software in C/C++.
- Hands-on experience with compiler technologies, LLVM, or low-level systems programming.
- Experience working with fuzzing frameworks such as libFuzzer, AFL, AFL++, or similar technologies.
- Strong understanding of software security principles, including memory-safety vulnerabilities and root-cause analysis.
- Proficiency with Python for automation and tooling development.
- Experience using Git-based development workflows.
- Demonstrated ability to write well-tested, maintainable, and documented production code.
Preferred Qualifications:- Experience with firmware, embedded systems, device software, or bare-metal development.
- Knowledge of hardware abstraction layers (HALs), MMIO, emulation, rehosting, or cross-compilation techniques.
- Experience with static-analysis platforms such as CodeQL.
- Familiarity with program-analysis concepts such as call graphs, data-flow analysis, or IR transformations.
- Experience integrating AI, machine learning, or LLM technologies into engineering workflows.
- Previous open-source contributor or maintainer experience.
- Experience building CI/CD pipelines and release automation.
- Familiarity with Azure DevOps, GitHub, or similar development platforms.
Pay Transparency: The typical base pay for this role across the U.S. is: $80.00 - $85.00 /hr. Non-exempt positions are eligible for overtime at a rate of 1.5 times the base hourly rate for all hours worked in excess of 40 in a work week, or as required by state or local law. Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education and experience. Full-time employees are eligible to select from different benefits packages. Packages may include medical, dental, and vision benefits, health savings accounts with qualified medical plan enrollment, 10 paid days off, 3 days paid bereavement leave, 401(k) plan participation with employer match, life and disability insurance, commuter benefits, dependent care flexible spending account, accident insurance, critical illness insurance, hospital indemnity insurance, accommodations and reimbursement for work travel, and discretionary performance or recognition bonus. Sick leave and mobile phone reimbursement provided based on state or local law. Consent to Communication and Use of AI Technology: By submitting your application for this position and providing your email address(es) and/or phone number(s), you consent to receive text (SMS), email, and/or voice communication whether automated (including auto telephone dialing systems or automatic text messaging systems), pre-recorded, AI-assisted, or individually initiated from Aditi Consulting, our agents, representatives, or affiliates at the phone number and/or email address you have provided. These communications may include information about potential opportunities and information. Message and data rates may apply. Message frequency may vary.You represent and warrant that the email address(es) and/or telephone number(s) you provided to us belong to you and that you are permitted to receive calls, text (SMS) messages, and/or emails at these contacts. You also acknowledge and agree to Aditi Consulting LLC’s use of AI technology during the sourcing process, including calls from an AI Voice Recruiter. AI is used solely to gather data and does not replace human-based decision-making in employment decisions. Calls may be recorded.Consent is not a condition of purchasing any property, goods, or services. You may revoke your consent at any time by replying “STOP” to :messages or by contacting privacy@aditiconsulting.com
. For information about our collection, use, and disclosure of applicant's personal information as well as applicants' rights over their personal information, please see our Privacy Policy
#AditiConsulting
#26-04699