AI-Driven Vulnerability Research Analyst

Two Six Technologies; Linthicum (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Retirement benefits

Paid leave

Tuition assistance

Professional development

Job summary

Two Six Technologies is seeking a Vulnerability Research Analyst in Maryland to conduct software security evaluations using AI-enabled tools. The role focuses on analyzing extracted source code and binaries from COTS/GOTS systems, evaluating vulnerability-finding performance, and assessing system resilience without hardware manipulation.

You will develop CodeQL and Semgrep-based detection rules, trace execution paths to root causes, and present risk assessments to program managers and partners.

Qualifications

• Active TS/SCI clearance with polygraph.
• Degree in Computer Science, Computer Engineering, Information Security, or equivalent.
• Experience in vulnerability research, static source code analysis, reverse engineering, or software security audits.
• Solid understanding of memory management, pointer arithmetic, and common software security flaws in compiled and managed languages.
• Familiarity with automated static/dynamic code analysis concepts and AI-driven automation tools.

Responsibilities

• Perform static and dynamic software vulnerability analysis on pre-extracted COTS/GOTS source code repositories and firmware images.
• Deploy AI-guided fuzzing and automated vulnerability detection suites to evaluate complex software architectures and identify high-risk logic flaws.
• Validate automated tool output by tracing execution paths in code to determine root causes and real-world exploitability.
• Develop custom CodeQL queries, Semgrep rules, and AST-based detection signatures to codify bug patterns and automate regression testing.
• Present vulnerability perspectives, risk assessments, and testing metrics to program managers, stakeholders, and intelligence community partners.

Skills

Vulnerability research

Static analysis

Reverse engineering

Software security audits

AI-driven automation tools

Education

Bachelor's degree in CS/CE/InfoSec

Tools

CodeQL

Semgrep

Tree-sitter

QEMU

Unicorn Engine

Ghidra/IDA

Job description

Two Six Technologies is seeking a Vulnerability Research Analyst in Maryland to conduct software security evaluations using AI-enabled tools. The role focuses on analyzing extracted source code and binaries from COTS/GOTS systems, evaluating vulnerability-finding performance, and assessing system resilience without hardware manipulation.

You will develop CodeQL and Semgrep-based detection rules, trace execution paths to root causes, and present risk assessments to program managers and partners.