Senior Vulnerability Researcher

Two Six Technologies•Arlington, VA

3d•$128,873 - $193,310•Onsite

About The Position

Two Six Technologies is hiring a Senior Vulnerability Researcher to join its Trusted Electronics & Effects team in Arlington, Virginia. The role focuses on software and firmware reverse engineering to uncover vulnerabilities in wireless and embedded systems. The researcher will work alongside CNO developers and hardware engineers on complex, real-world targets, supporting government customers with mission-critical security solutions. The position is an individual technical contributor role involving analysis of binaries, firmware, and wireless protocols; reverse engineering; and development of maintainable proof-of-concept exploits. The researcher will use and develop custom tools to analyze and manipulate software and firmware binaries and collaborate in a fast-paced, small-team environment. The role requires daily work in the Arlington office and an active Top Secret clearance, with the ability to obtain and maintain TS/SCI. The projected annual salary range is $128,873–$193,310. Compensation depends on factors such as education, experience, skills, geographic location, and organizational requirements. Benefits include medical, dental, and vision insurance, life and disability insurance, retirement benefits, paid leave, tuition assistance, and professional development.

Requirements

Bachelor’s degree or higher in Computer Science, Computer/Electrical Engineering, or a related field, or equivalent practical experience.
Experience developing, debugging, and scripting in C/C++ and Python within Linux command-line environments, with emphasis on low-level programming, memory management, and system interaction for reverse engineering and vulnerability research.
Experience with reverse engineering and vulnerability research using tools such as IDA Pro, Binary Ninja, or Ghidra.
Expertise in one or more of the following: firmware analysis (ARM, MIPS, PowerPC, or RTOS); firmware rehosting with emulation tools such as QEMU; fuzzing and exploit development; binary obfuscation and anti-analysis techniques; wireless protocols and radio signal analysis; or file system forensics and fault injection frameworks.
Knowledge of common network protocols such as TCP/IP, UDP, or HTTP.
Ability to work daily in the Arlington, Virginia office.
Active US Top Secret security clearance and ability to obtain and maintain TS/SCI.

Nice To Haves

Experience conducting vulnerability research on embedded systems.
Experience defeating modern mitigations such as ASLR, DEP, and stack canaries.
Knowledge of cellular standards such as 4G or 5G.
Knowledge of low-bandwidth communications such as RS485, RS232, or CAN.
Knowledge of Wi-Fi, Bluetooth, or Zigbee communications.
Previous experience in a client-facing technical role.

Responsibilities

Analyze binaries, firmware, and wireless protocols.
Reverse engineer complex targets and conduct vulnerability research.
Write maintainable proof-of-concept exploits following DevOps best practices.
Use and develop custom tools to analyze and manipulate software and firmware binaries.
Collaborate with CNO developers, vulnerability researchers, and hardware engineers in a fast-paced, small-team environment.
Solve complex technical challenges without predefined solutions.