Senior Vulnerability Researcher

Two Six Technologies•Arlington, VA

2d•Onsite

About The Position

Two Six Technologies is seeking a Senior Vulnerability Researcher to join its Trusted Electronics & Effects team in Arlington, Virginia. The role focuses on software and firmware reverse engineering and vulnerability research in wireless and embedded systems. The researcher will work with CNO developers and hardware engineers on complex, real-world targets and mission-critical security solutions for government customers. This position is based in the Arlington office and requires daily onsite work. The researcher will analyze binaries, firmware, and wireless protocols; reverse engineer targets; develop maintainable proof-of-concept exploits; and use or build custom tools to analyze and manipulate software and firmware binaries. The role involves collaborating in a small, fast-paced team and addressing complex technical problems without predefined solutions.

Requirements

Bachelor’s degree or higher in Computer Science, Computer/Electrical Engineering, or a related field, or equivalent practical experience.
Experience developing, debugging, and scripting in C/C++ and Python in Linux command-line environments, with an emphasis on low-level programming, memory management, and system interaction for reverse engineering and vulnerability research.
Experience with reverse engineering and vulnerability research using tools such as IDA Pro, Binary Ninja, or Ghidra.
Expertise in at least one of the following: firmware analysis (ARM, MIPS, PowerPC, or RTOS); firmware rehosting with emulation tools such as QEMU; fuzzing and exploit development; binary obfuscation and anti-analysis techniques; wireless protocols and radio signal analysis; or file system forensics and fault injection frameworks.
Knowledge of common network protocols such as TCP/IP, UDP, or HTTP.
Ability to work daily in the Arlington, Virginia office.
Active US Top Secret security clearance and ability to obtain and maintain TS/SCI clearance.

Nice To Haves

Experience conducting vulnerability research on embedded systems.
Experience defeating modern mitigations such as ASLR, DEP, and stack canaries.
Knowledge of cellular standards such as 4G or 5G.
Knowledge of low-bandwidth communications such as RS485, RS232, or CAN.
Knowledge of Wi-Fi, Bluetooth, or Zigbee communications.
Previous experience in a client-facing technical role.

Responsibilities

Analyze binaries, firmware, and wireless protocols and reverse engineer complex targets.
Write maintainable proof-of-concept exploits while following DevOps best practices.
Use and develop custom tools to analyze and manipulate software and firmware binaries.
Collaborate with CNO developers, vulnerability researchers, and hardware engineers.
Solve complex technical challenges without predefined solutions.