Principal Vulnerability Researcher at Two Six Technologies

Laurel, Maryland, United States

Apply Now

Not SpecifiedCompensation

Expert & Leadership (9+ years), Senior (5 to 8 years)Experience Level

Full TimeJob Type

UnknownVisa

Cybersecurity, DefenseIndustries

Requirements

Doctorate in Computer Science, Computer/Electrical Engineering, or related field and 7 years of relevant experience, OR Master’s degree and 9 years of relevant experience, OR Bachelor’s degree and 11 years of relevant experience, OR Associate’s degree and 13 years of relevant experience
Relevant experience in computer/information systems design/development, programming, information/cyber/network security, reverse-engineering, vulnerability analysis, penetration testing, computer forensics, information assurance, or systems engineering
Proficiency in C/C++, Python, and at least one ISA (e.g., x86/ARM/MIPS)
Proficiency in Linux command-line environments
Experience using a decompiler such as IDA Pro, Binary Ninja, or Ghidra
Experience using vulnerability research tools such as emulators or fuzzers
Experience using a software debugger such as GDB or WinDbg
Ability to work on-site at Laurel, Maryland customer site regularly
Active TS/SCI clearance with Polygraph required

Responsibilities

Lead the identification of vulnerabilities and attacks across hardware, software, personnel, logistics, procedures, and physical security, linking them to operational and mission impacts
Identify vulnerabilities and potential attacks across hardware, software, procedures, logistics, and physical security of systems
Develop proof of concept (PoC) code for identified vulnerabilities
Reverse-engineer targeted embedded systems to identify vulnerabilities
Review source code looking for risks and vulnerabilities
Analyze the effects of vulnerabilities on mission outcomes and operational effectiveness
Compare system attack techniques and propose operationally effective countermeasures
Produce reports, briefings, and perspectives on actual and potential attacks
Provide technical leadership on research efforts, prioritizing investigations, reviewing methodologies, and overseeing proof-of-concepts
Mentor and guide junior engineers and researchers, reviewing technical approaches and fostering skill development

Skills

Key technologies and capabilities for this role

Vulnerability ResearchReverse EngineeringEmbedded SystemsSource Code ReviewProof of ConceptExploitationHardware SecuritySoftware SecurityPhysical Security

Questions & Answers

Common questions about this position

Is this role remote or does it require on-site work?

This role requires regular on-site support at the Laurel, Maryland customer site.

What are the basic qualifications and education requirements for this position?

Candidates need a Doctorate in Computer Science, Computer/Electrical Engineering, or related field with 7 years of relevant experience, OR Master’s with 9 years, OR Bachelor’s with 11 years, OR Associate’s with 13 years. Relevant experience includes computer/information systems design/development, programming, information/cyber/network security, reverse-engineering, vulnerability analysis, penetration testing, computer forensics, information assurance, or systems engineering.

What technical skills and tools are required for the Principal Vulnerability Researcher role?

Proficiency is required in C/C++, Python, and at least one ISA (e.g., x86/ARM/MIPS), Linux command-line environments, decompilers like IDA Pro, Binary Ninja, or Ghidra, vulnerability research tools such as emulators or fuzzers, and software debuggers like GDB or WinDbg.

What is the team environment like at Two Six Technologies?

You'll join the Exploitation Sector, a team of dedicated hackers in Northern Virginia, working alongside engineers, researchers, and clients, with a focus on unrivaled collaboration, unwavering trust, and providing strategic technical leadership while mentoring junior team members.

What experience makes a strong candidate for this Principal Vulnerability Researcher position?

Strong candidates will have extensive relevant experience in areas like reverse-engineering, vulnerability analysis, penetration testing, and proficiency in key tools, along with the ability to lead research efforts, develop PoCs, and mentor junior engineers.

Two Six Technologies

Provides advanced technology solutions for defense

About Two Six Technologies

Two Six Technologies specializes in providing advanced technological solutions for critical missions, focusing on areas such as cybersecurity, data science, and electronic systems. Their products and services are designed to help U.S. government agencies, including DARPA and U.S. Cyber Command, defend networks and address advanced threats. The company operates on a project-based model, creating custom solutions tailored to the specific needs of their clients, which allows them to effectively respond to the unique challenges in national security and defense. Unlike many competitors, Two Six Technologies emphasizes rapid innovation and has a strong leadership team with expertise in relevant fields. Their goal is to deliver technological superiority to the United States and its allies through impactful advancements.

Arlington, VirginiaHeadquarters

2021Year Founded

$66MTotal Funding

EARLY_VCCompany Stage

Data & Analytics, Government & Public Sector, Cybersecurity, DefenseIndustries

501-1,000Employees

Benefits

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

401(k) Retirement Plan

Flexible Work Hours

Paid Vacation

Tuition Reimbursement

Risks

Increased competition may impact Two Six's market share in the national security sector.

Dependence on government contracts exposes Two Six to budgetary constraints.

Expansion into new regions like Ohio may strain resources and focus.

Differentiation

Two Six Technologies specializes in cybersecurity solutions for national security customers.

The company offers a range of operationally deployed products like Pulse and SIGMA.

Two Six Technologies has a global presence with operations in over 40 countries.

Upsides

In 2023, Two Six achieved over 25% organic revenue growth.

The company expanded its contract portfolio to over $1 billion in 2023.

Growing demand for zero trust solutions boosts Two Six's market opportunities.

Land your dream remote job 3x faster with AI

Try Jobo Free