Software Patch Verification Engineer
Two Six Technologies13 days ago
Linthicum, MD, USASenior
Base Salary
$132k - $198k/yr
Responsibilities
- Evaluate software and firmware patches through binary patch diffing and root-cause vulnerability analysis.
- Execute formal retesting and regression checks to verify bug closure and security-fix effectiveness.
- Reproduce original vulnerability findings and provide verification evidence for accreditation and reporting.
- Independently confirm patch integrity and ensure fixes fully address target vulnerabilities.
- Document analytical findings and help integrate AI-assisted software verification tools into security workflows.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline, or equivalent practical experience.
- Demonstrated experience in static and dynamic reverse engineering, binary patch diffing, and root-cause vulnerability analysis.
- Hands-on proficiency with Ghidra, IDA Pro, or Binary Ninja; GDB or WinDbg; and formal retest and regression procedures.
- Experience benchmarking expected versus observed patched behavior, evaluating vulnerability regressions, and compiling verification evidence.
- Strong programming and scripting skills in C, C++, and Python within Linux environments.
- Active US Security clearance of Top Secret/SCI with Polygraph.
- Preferred: experience applying AI/ML models or LLM frameworks to code analysis, defect detection, or automated patch verification.
- Preferred: familiarity with Frida, DynamoRIO, or automated fuzzing engines.
- Preferred: knowledge of ASLR, DEP, CFI, Stack Canaries, and common vulnerability patterns such as CWEs.
Benefits
- Medical, dental, and vision insurance.
- Life and disability insurance.
- Retirement benefits and paid leave.
- Tuition assistance and professional development.
- Annual salary range of $132,123—$198,184 USD.
- Onsite position in Linthicum, Maryland.
About Two Six Technologies
Two Six Technologies builds cybersecurity, information operations, data science, and microelectronics software and hardware for U.S. national-security customers, delivering deployable products and applied R&D. Its portfolio spans secure communications, hardware security, and analytics, sold primarily through government contracts. Founded in 2021 and headquartered in Arlington, Virginia, the company’s customers have included DARPA, the Department of State, U.S. Cyber Command, and the Department of Homeland Security.