Vulnerability Researcher

Two Six Technologies•Arlington, VA

1d•$112,276 - $168,414•Onsite

About The Position

Two Six Technologies is seeking a Vulnerability Researcher to join its Trusted Electronics & Effects team. The role focuses on reverse engineering wireless and embedded systems to identify vulnerabilities, assess security impact, and develop proof-of-concept exploits. The researcher will work alongside CNO developers and hardware engineers on complex, real-world targets supporting government customers and mission-critical security solutions. The position involves analyzing firmware, software protections, and wireless protocols, as well as using and developing tools to inspect and manipulate software and firmware binaries. The team works in a fast-paced, small-team environment and tackles complex technical challenges without predefined solutions. The position requires daily work in the Herndon, Virginia office. Eligibility to obtain and maintain a U.S. TS/SCI security clearance is required; an active Top Secret clearance is preferred.

Requirements

Bachelor’s degree or higher in Computer Science, Computer/Electrical Engineering, or a related field, or equivalent practical experience.
Experience developing, debugging, and scripting in C/C++ and Python in Linux command-line environments, emphasizing low-level programming, memory management, and system interaction for reverse engineering and vulnerability research.
Experience with reverse engineering and vulnerability research using tools such as IDA Pro, Binary Ninja, or Ghidra.
Expertise in one or more of the following: firmware analysis (ARM, MIPS, PowerPC, or RTOS); firmware rehosting with emulation tools such as QEMU; fuzzing and exploit development; binary obfuscation and anti-analysis techniques; wireless protocols and radio signal analysis; file system forensics; or fault injection frameworks.
Knowledge of common network protocols such as TCP/IP, UDP, or HTTP.
Ability to work daily in the Herndon, Virginia office.
Eligibility to obtain and maintain a U.S. Security clearance at the TS/SCI level.

Nice To Haves

Experience conducting vulnerability research on embedded systems.
Experience defeating modern mitigations such as ASLR, DEP, and stack canaries.
Knowledge of cellular standards such as 4G or 5G.
Knowledge of low-bandwidth communications such as RS485, RS232, or CAN.
Knowledge of Wi-Fi, Bluetooth, or Zigbee communications.
Previous experience in a client-facing technical role.
Active Top Secret clearance.

Responsibilities

Contribute technically to reverse engineering wireless and embedded systems, identifying vulnerabilities and assessing their security impact.
Develop proof-of-concept exploits for discovered vulnerabilities while following DevOps best practices to keep codebases organized and maintainable.
Analyze firmware, software protections, and wireless protocols to uncover security flaws.
Use and develop custom tools to analyze and manipulate software and firmware binaries.
Collaborate with CNO developers, vulnerability researchers, and hardware engineers in a fast-paced, small-team environment.
Solve complex technical challenges without predefined solutions.