Embedded Security Researcher - Vulnerability & PoC

Trusted Concepts, Inc.; Dayton (OH); On-site; USD 84,387 - 126,581; Full time

Job summary

Two Six Technologies in Dayton, Ohio, is seeking a Vulnerability Researcher to join our team of security researchers, CNO developers, and hardware engineers. You will focus on reverse engineering embedded systems and software to uncover vulnerabilities and develop actionable PoCs for our government customers.

This role requires a bachelor’s in a related field, hands-on experience in cybersecurity research, and proficiency with modern decompilers and debuggers.

Qualifications

• Bachelor's degree in a related field or equivalent.
• Experience in cybersecurity research, vulnerability research or reverse engineering.
• Proficiency with decompilers (Ghidra/IDA Pro/BinNinja) and debuggers (GDB/WinDBG).
• Proficiency in C/C++ and Python.
• Knowledge of Unix/Linux and network protocols (TCP/IP, UDP, HTTP).

Responsibilities

• Perform targeted reverse engineering on embedded systems and software components.
• Conduct static and dynamic analysis to identify vulnerabilities.
• Develop and refine proof-of-concept capabilities to demonstrate research progress.
• Contribute to technical reports and documentation.
• Collaborate with cross-functional teams to translate research into customer solutions.

Skills

Cybersecurity research

Reverse engineering

Unix/Linux knowledge

Networking (TCP/IP/UDP)

C/C++

Python scripting

Security clearance

English communication

Education

Bachelor's Degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field

Tools

Ghidra/IDA Pro/ Binary Ninja

GDB/WinDBG

Job description

Two Six Technologies in Dayton, Ohio, is seeking a Vulnerability Researcher to join our team of security researchers, CNO developers, and hardware engineers. You will focus on reverse engineering embedded systems and software to uncover vulnerabilities and develop actionable PoCs for our government customers.

This role requires a bachelor’s in a related field, hands-on experience in cybersecurity research, and proficiency with modern decompilers and debuggers.