Software Vulnerability Analyst
Two Six Technologies1 month ago
Linthicum, MD, USASenior
Base Salary
$148k - $222k/yr
Responsibilities
- Evaluate software and firmware patches using binary patch diffing and root-cause vulnerability analysis.
- Work independently to confirm patch integrity and ensure security fixes address target vulnerabilities.
- Document analytical findings and validate the effectiveness of security fixes.
- Assist with integrating AI-assisted software verification tools into security analysis workflows.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline, or equivalent practical experience.
- Demonstrated experience in static and dynamic reverse engineering, binary patch diffing, and software vulnerability analysis.
- Hands-on proficiency with Ghidra, IDA Pro, or Binary Ninja and GDB or WinDbg.
- Experience performing root-cause analysis of software vulnerabilities and validating patch mitigation effectiveness.
- Strong programming and scripting skills in C, C++, and Python within Linux environments.
- Ability to provide daily onsite support in Linthicum, Maryland.
- Active TS/SCI clearance with Polygraph is required.
- Preferred: experience applying AI/ML models or LLM frameworks to code analysis, vulnerability discovery, or patch verification.
- Preferred: familiarity with Frida, DynamoRIO, or automated fuzzing engines.
- Preferred: knowledge of ASLR, DEP, CFI, Stack Canaries, and common vulnerability patterns such as CWEs.
Benefits
- Medical, dental, and vision insurance.
- Life and disability insurance.
- Retirement benefits and paid leave.
- Tuition assistance and professional development.
- Daily onsite work in Linthicum, Maryland.
About Two Six Technologies
Two Six Technologies builds cybersecurity, information operations, data science, and microelectronics software and hardware for U.S. national-security customers, delivering deployable products and applied R&D. Its portfolio spans secure communications, hardware security, and analytics, sold primarily through government contracts. Founded in 2021 and headquartered in Arlington, Virginia, the company’s customers have included DARPA, the Department of State, U.S. Cyber Command, and the Department of Homeland Security.