Software Vulnerability Analyst

• Evaluate software and firmware patches to perform binary patch diffing and root-cause vulnerability analysis in support of national security research missions.
• Work under minimal supervision with latitude for independent judgment to confirm patch integrity and ensure security fixes completely address target vulnerabilities.
• Document detailed analytical findings, validate security fixes, and assist with integrating AI-assisted software verification tools into security analysis workflows., Website LinkedIn Profile Are you eligible for a DoD security clearance?* Select…

For more information on clearances, review this document. Security Clearance * Select… Desired Salary* Select… Have you worked for Two Six Technologies or an affiliate in the past? If so, please provide the name of the team you supported and dates of employment.* Are you a current or former direct employee of any government institutions (including any governmental entities at the federal/national, state/provincial, and local levels and including publicly funded institutions)?* Select… Are you currently bound by any non-compete or employment agreement?* Select… How did you hear about us?* If you were referred by an Employee, please list their name. Please provide your Legal Name * Are you legally authorized to work in the United States?* Select… Do you now, or will you in the future, require company sponsorship for an employment visa? (e.g. H-1B, E-3, TN status)* Select…

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Two Six Technologies’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law. Gender* Select… Are you Hispanic/Latino?* Select… Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A “disabled veteran” is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran’s discharge or release from active duty in the U.S. military, ground, naval, or air service.

An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. Veteran Status* Select…

• Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline (or equivalent practical experience).
• Demonstrated experience in static and dynamic reverse engineering, binary patch diffing (e.g., BinDiff, Diaphora), and software vulnerability analysis.
• Hands-on proficiency with disassembly tools (Ghidra, IDA Pro, or Binary Ninja) and software debuggers (GDB, WinDbg).
• Proven track record performing root-cause analysis on software vulnerabilities and validating patch mitigation effectiveness.
• Strong programming and scripting skills in C, C++, and Python within Linux environments.
• Ability to provide on-site support in Linthicum, Maryland daily

Nice to have (preferred)

• Experience applying AI/ML models or LLM frameworks to software code analysis, vulnerability discovery, or patch verification.
• Familiarity with dynamic instrumentation frameworks (Frida, DynamoRIO) or automated fuzzing engines.
• Knowledge of operating system security mitigations (ASLR, DEP, CFI, Stack Canaries) and common vulnerability patterns (CWEs).

Security Clearance:

• Active TS/SCI clearance with Polygraph required

Two Six Technologies is committed to providing competitive and comprehensive compensation packages that reflect the value we place on our employees and their contributions. We believe in rewarding skills, experience, and performance. Our offerings include but are not limited to, medical, dental, and vision insurance, life and disability insurance, retirement benefits, paid leave, tuition assistance and professional development.

The projected salary range listed for this position is annualized. This is a general guideline and not a guarantee of salary. Salary is one component of our total compensation package and the specific salary offered is determined by various factors, including, but not limited to education, experience, knowledge, skills, geographic location, as well as contract specific affordability and organizational requirements.

Salary Range

$147,867 - $221,801 USD

Looking for other great opportunities? Check out Two Six Technologies Opportunities for all our Company’s current openings!, School Select… Degree Select… Discipline Select…