Senior Vulnerability Researcher
Two Six Technologies2 days ago
Arlington, VA, USASenior
Base Salary
$129k - $193k/yr
Responsibilities
- Analyze binaries, firmware, and wireless protocols and reverse engineer complex embedded targets.
- Develop maintainable proof-of-concept exploits and apply DevOps best practices.
- Create and use custom tools to analyze and manipulate software and firmware binaries.
- Conduct firmware analysis, firmware rehosting, fuzzing, exploit development, binary anti-analysis, wireless analysis, file-system forensics, and fault injection.
- Collaborate with CNO developers, vulnerability researchers, and hardware engineers to solve complex technical challenges.
Requirements
- Bachelor's or higher degree in Computer Science, Computer/Electrical Engineering, or a related field, or equivalent practical experience.
- Experience developing, debugging, and scripting in C/C++ and Python in Linux command-line environments.
- Strong knowledge of low-level programming, memory management, and system interaction for reverse engineering and vulnerability research.
- Experience with reverse engineering and vulnerability research using IDA Pro, Binary Ninja, or Ghidra.
- Knowledge of TCP/IP, UDP, or HTTP network protocols.
- Active U.S. Top Secret security clearance and ability to obtain and maintain TS/SCI clearance.
- Ability to work daily in the Arlington, Virginia office.
- Preferred qualifications include embedded-systems vulnerability research, bypassing ASLR, DEP, and Stack Canaries, cellular and low-bandwidth communications knowledge, wireless communications experience, and prior client-facing technical experience.
Benefits
- Medical, dental, and vision insurance.
- Life and disability insurance.
- Retirement benefits, paid leave, tuition assistance, and professional development.
- This is an on-site role requiring daily work in the Arlington, Virginia office.
About Two Six Technologies
Two Six Technologies builds cybersecurity, information operations, data science, and microelectronics software and hardware for U.S. national-security customers, delivering deployable products and applied R&D. Its portfolio spans secure communications, hardware security, and analytics, sold primarily through government contracts. Founded in 2021 and headquartered in Arlington, Virginia, the company’s customers have included DARPA, the Department of State, U.S. Cyber Command, and the Department of Homeland Security.