Vulnerability Researcher

Two Six Technologies•Arlington, VA

2d•$112,276 - $168,414•Onsite

About The Position

Two Six Technologies is seeking a Vulnerability Researcher to join its Trusted Electronics & Effects team. The role focuses on software and firmware reverse engineering to uncover vulnerabilities in wireless and embedded systems. The researcher will work alongside CNO developers and hardware engineers on mission-critical security solutions for government customers, conducting research on complex real-world targets and developing proof-of-concept exploits. The position is based in the Herndon, Virginia office and requires daily onsite work. Candidates must be eligible to obtain and maintain a U.S. Security clearance at the TS/SCI level; an active Top Secret clearance is preferred. The projected annual salary range is $112,276–$168,414, with the specific offer determined by factors including education, experience, skills, geographic location, and organizational requirements. The company offers medical, dental, and vision insurance, life and disability insurance, retirement benefits, paid leave, tuition assistance, and professional development. Two Six Technologies is an Equal Opportunity Employer and uses E-Verify in its hiring practices.

Requirements

Bachelor’s or higher degree in Computer Science, Computer/Electrical Engineering, or a related field, or equivalent practical experience.
Experience developing, debugging, and scripting in C/C++ and Python in Linux command-line environments, with emphasis on low-level programming, memory management, and system interaction for reverse engineering and vulnerability research.
Experience with reverse engineering and vulnerability research using tools such as IDA Pro, Binary Ninja, or Ghidra.
Expertise in one or more of the following: firmware analysis (ARM, MIPS, PowerPC, or RTOS); firmware rehosting using emulation tools such as QEMU; fuzzing and exploit development; binary obfuscation and anti-analysis techniques; wireless protocols and radio signal analysis; or file system forensics and fault injection frameworks.
Knowledge of common network protocols such as TCP/IP, UDP, or HTTP.
Ability to work daily in the Herndon, Virginia office.
Eligibility to obtain and maintain a U.S. Security clearance at the TS/SCI level.

Nice To Haves

Experience conducting vulnerability research on embedded systems.
Experience defeating modern mitigations such as ASLR, DEP, and stack canaries.
Knowledge of cellular standards such as 4G or 5G.
Knowledge of low-bandwidth communications such as RS485, RS232, or CAN.
Knowledge of Wi-Fi, Bluetooth, or Zigbee communications.
Previous experience in a client-facing technical role.
Active Top Secret clearance.

Responsibilities

Conduct reverse engineering of wireless and embedded systems, identify vulnerabilities, and assess their security impact.
Develop proof-of-concept exploits for discovered vulnerabilities and follow DevOps best practices to keep codebases organized and maintainable.
Analyze firmware, software protections, and wireless protocols to uncover security flaws.
Use and develop custom tools to analyze and manipulate software and firmware binaries.
Collaborate with CNO developers, vulnerability researchers, and hardware engineers in a small-team environment.
Solve complex technical challenges without predefined solutions.