Software Vulnerability Analyst

An analyst on Two Six Technologies' Trusted Electronics and Effects team who verifies, for national security research customers, that software and firmware patches fully close the vulnerabilities they were meant to fix. The work is binary patch diffing, tracing each flaw back to its root cause, confirming the fix holds, writing up findings, and helping the team adopt AI-assisted verification tools, with a good deal of independence.

The team wants static and dynamic reverse engineering skills, patch diffing with BinDiff or Diaphora, disassemblers such as Ghidra or IDA Pro, debuggers such as GDB or WinDbg, a record of root-cause analysis, and C, C++ and Python on Linux. Frida, fuzzing and knowledge of exploit mitigations are pluses. An active TS/SCI with polygraph is required, with daily on-site work in Linthicum, Maryland.