Software Patch Verification Engineer

Two Six Technologies•Linthicum, MD

6d•$132,123 - $198,184•Onsite

About The Position

Two Six Technologies is seeking a Software Patch Verification Engineer to join its team in Linthicum, Maryland. The team focuses on binary patch diffing, root-cause vulnerability analysis, and software security validation. The role involves analyzing software and firmware patches, verifying security fixes, running formal regression checks, and confirming vulnerability mitigation across target systems. The engineer will work with limited supervision and exercise independent judgment, document analytical findings, support evidence for system accreditation and reporting, and help integrate AI-assisted verification tools into security analysis workflows. An active US Top Secret/SCI clearance with Polygraph is required.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline, or equivalent practical experience.
Demonstrated experience in static and dynamic reverse engineering, binary patch diffing (such as BinDiff or Diaphora), and root-cause vulnerability analysis.
Hands-on proficiency with disassembly tools such as Ghidra, IDA Pro, or Binary Ninja; software debuggers such as GDB or WinDbg; and formal retest or regression checks against software fixes.
Track record benchmarking expected versus observed patched behavior, evaluating patch vulnerability regressions, and compiling verification evidence for accreditation reporting.
Strong programming and scripting skills in C, C++, and Python within Linux environments.
Active US Security clearance of Top Secret/SCI with Polygraph.

Nice To Haves

Experience applying AI/ML models or LLM frameworks to software code analysis, defect detection, or automated patch verification.
Familiarity with dynamic instrumentation frameworks such as Frida or DynamoRIO, or automated fuzzing engines.
Knowledge of operating system security mitigations, including ASLR, DEP, CFI, and Stack Canaries, and common vulnerability patterns such as CWEs.

Responsibilities

Evaluate software and firmware patches using binary patch diffing and root-cause vulnerability analysis, including assessment for newly introduced security risks.
Execute formal retest procedures and regression checks against fixes, comparing expected and observed patched behavior and verifying bug closure.
Support reproducibility of original vulnerability findings and provide verification evidence for system accreditation and reporting.
Independently confirm patch integrity and that security fixes fully address target vulnerabilities.
Document detailed analytical findings.
Assist with integrating AI-assisted software verification tools into security analysis workflows.