Listing Description

Two Six Technologies is seeking a Lead Vulnerability Researcher to support our growing team in Arlington, Virginia. You will work with a range of clients supporting national security missions. You will become a trusted advisor while learning and performing valuable technical and industry skills. This role is technical at its core – along with in-depth reverse engineering and exploit development you will transition those findings into capabilities.

Job Responsibilities & Duties

• Take on complex technical problems for which there is often no known answer


• Collaborate with an interdisciplinary team to align capability development roadmaps and complete the transfer of vulnerability research prototypes into operational fieldable solutions


• Develop automated solutions to complex reverse engineering and vulnerability research problems 


• Create scalable infrastructure for working with a broad range of hardware and software architectures and tech stacks


• Contribute to the forward development of technical solutions

Qualifications & Skills- Required:

• Bachelor’s (or higher) degree in computer science, engineering, or a related field (solid knowledge in RE or VR may substitute for a specific degree)


• Minimum 5 years of experience with software/firmware development using low-level programming languages (C and at least one assembly language), scripting languages (e.g., Python), and the *nix command line


• Strong familiarity with cybersecurity principles and a strong interest in learning more


• Minimum 5 years of experience with common disassemblers/decompilers and reverse engineering tools (IDA, Ghidra, Binary Ninja)


• Experience with software reverse engineering concepts: static analysis, dynamic analysis, fuzzing techniques


• Experience performing vulnerability research, including attack surface triage, finding vulnerabilities, and developing proofs of concept to demonstrate security impact


• Experience providing technical/functional direction and developing techniques to implement, ensuring customer satisfaction.


• Experience leading a small technical team of engineers and researchers


• Active US Security clearance of Top Secret level and ability to obtain and maintain TS/SCI


• Must be willing to obtain and maintain a Polygraph clearance

Nice to have, but not expected:

• Familiarity with Binary Ninja API or Ghidra scripting


• Familiarity building or securing embedded devices and other digital systems


• Familiarity with embedded binary reverse engineering (ARM, RTOS, etc.)


• Familiarity with basic cryptography design and implementation concepts


• Familiarity with Hardware and embedded devices


• Experience in a client-facing technical role


• An active Top Secret/SCI DoD or IC security clearance

Clearance Requirements:

• Active US Security clearance of Top Secret level and ability to obtain and maintain TS/SCI


• Must be willing to obtain and maintain a Polygraph clearance

#LI-ZS1

#LI-ONSITE