Senior Vulnerability Researcher

The role

You will conduct reverse engineering on embedded systems to find security vulnerabilities. You will perform static and dynamic analysis and develop proof-of-concept capabilities.

What you will do

• Conduct comprehensive reverse engineering on a variety of embedded systems
• Perform static and dynamic analysis to find security vulnerabilities in embedded systems
• Develop proof-of-concept capabilities to show research progress
• Document research findings to further the team's understanding of embedded systems
• Collaborate with other disciplines to deliver solutions to our customers

Required qualifications

• Bachelor's Degree in Electrical Engineering, Computer Engineering, Computer Science, or related field
• Knowledge of *nix operating systems
• Knowledge of common network protocols TCP/IP, UDP, or HTTP
• Proficiency with at least one modern debugger such as GDB or WinDBG
• Proficiency in at least one modern decompiler such as Ghidra, IDA, or Binary Ninja
• Proficiency in at least one native programming language such as C or C++
• Proficiency in at least one scripting language such as Python
• Proficiency in at least one assembly language such as x86 or ARM
• Active US Security clearance of the Secret level and ability to obtain and maintain TS/SCI

Nice to have

• Experience conducting vulnerability research on embedded systems
• Experience with defeating modern migrations such as ASLR, DEP, and Stack Canaries
• Knowledge of cellular standards such as 4G or 5G
• Knowledge of low bandwidth communications such as RS485, RS232, CAN
• Knowledge of Wifi, Bluetooth, Zigbee communication
• Previous experience in a client-facing technical role
• Participation in CTFs or evidence of independent security research projects

Benefits

• medical, dental, and vision insurance
• life and disability insurance
• retirement benefits
• paid leave
• tuition assistance
• professional development

Before you apply

• Active US Security clearance of the Secret level and ability to obtain and maintain TS/SCI
• uses E-Verify in its hiring practices

About the company

Two Six Technologies builds, deploys, and implements innovative products that solve complex challenges. They support customers in building a safer global future through collaboration and trust.