Overview of Opportunity 

Join the Embedded Sector of Two Six Technologies—a team of dedicated hackers in Arlington, Virginia—where you’ll immerse yourself in cutting-edge Vulnerability Research on a wide range of unique embedded systems. Working side by side with top-tier CNO developers and hardware engineers, you’ll discover vulnerabilities and create proof of concepts on embedded systems. Our fast-growing roster of government customers relies on us to deliver advanced security solutions, and we’re looking for a Senior Vulnerability Researcher to help us continue pushing boundaries. If you’re passionate about building tools that make a tangible impact on national security, we want you on our team.

What you will do:

• Analyze and solve complex technical challenges with no predefined answers.
• Perform in-depth reverse engineering to identify vulnerabilities, assess their impact, and transform findings into actionable capabilities.
• Deconstruct and understand the functionality of intricate technical systems.
• Navigate ambiguity and independently forge paths toward innovative solutions.
• Collaborate in a small-team environment, where your contributions will have an outsized impact.
• Leverage your expertise in digital forensics and watermarking to inform secure development practices and maintain data integrity throughout the product lifecycle.

What you will need (Basic Qualifications):

• Bachelor’s (or higher) degree in Computer Science, Computer/Electrical Engineering, or a related field (or equivalent practical experience).
• Experience developing, debugging, and scripting in C/C++ and Python within Linux command-line environments, with a strong emphasis on low-level programming, memory management, and system interaction for reverse engineering and vulnerability research.
• Experience with reverse engineering and vulnerability research, using tools such as IDA Pro, Binary Ninja, or Ghidra.
• Expertise in one or more of the following:
• Firmware analysis (ARM, MIPS, PowerPC, RTOS).
• Firmware rehosting using emulation tools such as QEMU.
• Fuzzing and exploit development.
• Binary obfuscation and anti-analysis techniques.
• Wireless protocols and radio signal analysis.
• File system forensics and fault injection frameworks.

Nice to have (Preferred):

• Experience scripting with the Binary Ninja API or Ghidra.
• Experience with other languages (e.g. Go, Rust).
• Knowledge of embedded device security and reverse engineering (e.g., ARM, RTOS).
• Familiarity with cryptography concepts and their implementation.
• Hands-on experience working with hardware and embedded systems.
• Client-facing experience in technical roles.
• Prefer active TS/SCI with Poly.

Security Clearance:

• Active Top Secret clearance with eligibility/willingness to obtain a Top Secret/SCI clearance. Prefer active TS/SCI with Poly.

#LI-ZS1

#LI-ONSITE