Principal Vulnerability Researcher

Two Six Technologies is seeking an experienced Vulnerability Researcher with expertise in RF or communications domains to support our programs at our Arlington, Virginia headquarters. This role is technical at its core – along with in-depth reverse engineering and exploit development you will transition those findings into capabilities.

Job Responsibilities & Duties:

• Collaborate with team to align capability development roadmaps and complete transfer of vulnerability research prototypes into production environments
• perform reverse engineering and vulnerability analysis, informing operational parameters for complex system
• Conducting in-depth reverse engineering and vulnerability analysis across various architectures and platforms
• Modeling and analyzing in-memory compiled application behavior to answer customer requirements 
• Assist with the forward development of technical solutions

Qualifications & Skills Required:

• Bachelor’s (or higher) degree in computer science, engineering, or a related field (solid knowledge in RE or VR may substitute for a specific degree)
• Minimum 9 years of experience in firmware development using low-level programming languages (C and at least one assembly language), scripting languages (e.g., Python), and the *nix command line
• Minimum 5 years of experience with common disassemblers/decompilers and reverse engineering tools (IDA, Ghidra, Binary Ninja)
• Active US Security clearance of Secret level and ability to obtain and maintain TS/SCI
• Must be willing to obtain and maintain a Polygraph clearance

Nice if you have:

• Strong familiarity with cybersecurity principles and a strong interest in providing guidance to program staff
• Experience with software reverse engineering concepts: static analysis, dynamic analysis, fuzzing techniques creating intellectual capital, white papers, blogs, etc. to maintain existing and expand new business.
• Familiarity with building or securing embedded devices, other digital systems, and embedded binary reverse engineering (ARM, RTOS, etc.)
• Familiarity with basic cryptography design and implementation concepts
• Previous experience in a client-facing technical role

#LI-AB1

#LI-Onsite