Vulnerability Research Engineer

Job ID: 325

Two Six Technologies is seeking a Vulnerability Research Engineer. You will work with a range of clients supporting both national security missions and commercial clients. You will become a trusted advisor while learning and performing valuable technical and industry skills. This role is technical at its core – along with in-depth reverse engineering and exploit development you will transition those findings into capabilities.

Since we are a small team, you will not be lost in the shuffle. You will be a key player in a small fast paced team, owning your own projects and developing client relationships. Working with our lead Reverse Engineer, you will have access to top experts in the field with experience across a range of domains. You will have numerous opportunities to define your work.

Job Responsibilities & DutiesGiven the technical nature of this role, experience in computer science, computer engineering, or a similar field is required. Significant proven experience in reverse engineering (RE) or vulnerability research (VR) can show your fit even if your background is outside of one of these fields.

You should be comfortable taking on complex technical problems for which there is often no known answer. You should be comfortable with ambiguity and forging your own path; our small team setting will provide you opportunity for outsized impact. While you will receive extensive training, mentorship, and coaching, you must be comfortable executing against goals independently since there’s no playbook for breaking unique complex systems.

Qualifications & Skills- Required:

• Bachelor’s (or higher) degree in computer science, engineering, or a related field (solid knowledge in RE or VR may substitute for a specific degree)
• Minimum 3 years of experience firmware development using low-level programming languages (C and at least one assembly language), scripting languages (e.g., Python), and the *nix command line
• Strong familiarity with cybersecurity principles and a strong interest in learning more
• Minimum 3 years of experience with common disassemblers/decompilers and reverse engineering tools (IDA, Ghidra, Binary Ninja)
• Experience with software reverse engineering concepts: static analysis, dynamic analysis, fuzzing techniques
• Active US Security clearance of Secret level and ability to obtain and maintain TS.

Nice to have, but not expected:

• Familiarity with Binary Ninja API or Ghidra scripting
• Familiarity building or securing embedded devices and other digital systems
• Familiarity with embedded binary reverse engineering (ARM, RTOS, etc.)
• Familiarity with basic cryptography design and implementation concepts
• Experience in a client-facing technical role

Clearance Requirements:

• Active Secret clearance 

Two Six Technologies is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment at Two Six Technologies without regard to race, color, religion,  national origin, sex, age, physical and mental disability, sexual orientation, gender identity or expression, genetic information, veteran, marital, pregnancy or citizenship status; or any other status prohibited by applicable national, federal, state or local law.

Two Six Technologies Covid-19 Vaccination Policy requires employees to be fully vaccinated. Exceptions to this policy are only granted to those with a company-approved medical or religious accommodation.  Prospective or new employees will be required to adhere to this policy and submit proof of vaccination or have an approved exemption prior to the start of their employment.   

If you are interested in applying for employment with Two Six Technologies and require an accommodation, please contact Human Resources at Two Six Technologies by sending an email to [email protected].  Information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations.