Verve is on a mission to secure the world's critical infrastructure providers by bringing the tools and techniques of defense-in-depth strategies employed by best-in-breed IT practices to OT (Operational Technology).
We're a team of software developers, controls engineers, product managers, designers, and security professionals working to build software solutions that keep the bedrock of modern-day life safe: power, oil, gas, water, chemicals, medicine and other industries.
Verve's Agentless Device Inventory (ADI) group is responsible for developing software tools that let Verve collect basic device information from various embedded devices commonly found in Operational Technology (OT) environments. The ADI Research team owns the first part of this process, which involves figuring out what approaches look most promising for collecting this information and building working proofs of concept. This is a great role for curious folks with a broad tech skillset who enjoy a good puzzle.
What You'll Do
Analyze, reverse-engineer, and document industrial network protocols, functions, and APIs
Produce high-quality research documentation
Develop communication proof of concepts
Work with customers and industry partners to collect and analyze host and network analytic opportunities in production environments
Hardware and software Vulnerability analysis
What You'll Need
Experience utilizing analysis tools to conduct in-depth reverse engineering of software protocols and APIs
Knowledge of at least one programming language
Demonstrated ability to be self-driven and work independently
Comfort working with unfamiliar technologies
Knowledge of communication protocols
Network and hardware systems troubleshooting skills
Demonstrated ability to follow, write, and maintain procedural documentation
Nice to Have
Knowledge of industrial communication protocols such as EtherNet/IP, BACnet, Modbus, Vnet/IP, Honeywell Mercury, ProfiNet, or MMS
- Experience working with specialized industrial hardware
Experience with Python
Experience with Wireshark
Verve is an Equal Opportunity Employer. Verve does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need