Vulnerability Researcher

The role

You will perform reverse engineering of wireless and embedded systems to identify vulnerabilities. You will develop proof-of-concept exploits and analyze firmware, software protections, and wireless protocols.

What you will do

• Reverse engineer wireless and embedded systems to identify vulnerabilities and assess security impact.
• Develop proof-of-concept exploits following DevOps best practices.
• Analyze firmware, software protections, and wireless protocols.
• Utilize and develop custom tools to analyze and manipulate software/firmware binaries.
• Collaborate with CNO developers, vulnerability researchers, and hardware engineers.
• Solve complex technical challenges with no predefined solutions.

Required qualifications

• Bachelor's (or higher) degree in Computer Science, Computer/Electrical Engineering, or a related field (or equivalent practical experience).
• Experience developing, debugging, and scripting in C/C++ and Python within Linux command-line environments.
• Experience with low-level programming, memory management, and system interaction.
• Experience with reverse engineering and vulnerability research using tools such as IDA Pro, Binary Ninja, or Ghidra.
• Expertise in one or more: Firmware analysis (ARM, MIPS, PowerPC, RTOS).
• Expertise in one or more: Firmware rehosting using emulation tools such as QEMU.
• Expertise in one or more: Fuzzing and exploit development.
• Expertise in one or more: Binary obfuscation and anti-analysis techniques.
• Expertise in one or more: Wireless protocols and radio signal analysis.
• Expertise in one or more: File system forensics and fault injection frameworks.
• Knowledge of common network protocols TCP/IP, UDP, or HTTP.
• Ability to work in the Herndon, Virginia office daily.

Nice to have

• Experience conducting vulnerability research on embedded systems.
• Experience with defeating modern migrations such as ASLR, DEP, and Stack Canaries.
• Knowledge of cellular standards such as 4G or 5G.
• Knowledge of low bandwidth communications such as RS485, RS232, CAN.
• Knowledge of Wifi, Bluetooth, Zigbee communication.
• Previous experience in a client-facing technical role.

Benefits

• Medical, dental, and vision insurance
• Life and disability insurance
• Retirement benefits
• Paid leave
• Tuition assistance
• Professional development

Before you apply

• Eligibility to obtain and maintain a US Security clearance of TS/SCI level
• Active Top Secret clearance preferred

About the company

Two Six Technologies builds, deploys, and implements innovative products to solve complex challenges. They support customers in building a safer global future through collaboration and trust.