Lead Vulnerability Researcher: Hardware & Software Security

Trusted Concepts, Inc.; Linthicum (MD); On-site; USD 285,000 - 300,000; Full time

Job summary

Two Six Technologies is seeking a Lead Vulnerability Researcher to guide investigations across hardware, software, and operational systems. You will work with engineers and security researchers to identify critical vulnerabilities, develop PoC code, and mentor junior staff on technical approaches.

The role requires regular on-site support at the Linthicum, Maryland site, with a focus on delivering advanced security solutions to government customers.

Qualifications

• Doctorate or master's with ample vulnerability research experience required.
• Experience in computer/information systems design, security, or related fields.
• Proficiency in C/C++, Python, and multiple ISA architectures.
• Linux CLI proficiency and familiarity with reverse-engineering tools.
• Experience with decompilers (IDA Pro/Binary Ninja/Ghidra).
• Experience with vulnerability research tools like emulators and fuzzers.
• Ability to work on-site at Linthicum, Maryland regularly.

Responsibilities

• Lead vulnerability research across hardware, software, and systems.
• Develop PoC code for identified vulnerabilities.
• Reverse-engineer embedded systems to uncover flaws.
• Review code for risks and vulnerabilities.
• Analyze vulnerability impact on mission outcomes.
• Propose effective countermeasures and operational guidance.
• Produce reports and briefings on attacks and defenses.
• Mentor junior engineers and oversee research concepts.

Skills

C/C++

Python

ISA knowledge

Linux

Reverse-engineering

Ghidra/IDA/Binary Ninja

GDB/WinDbg

On-site work

Education

PhD in Computer Science/Engineering or related

Master's degree in related field

Bachelor's degree + 8+ years experience

Associate's degree + 10 years experience

Tools

IDA Pro

Binary Ninja

Ghidra

Emulators

Fuzzers

GDB

WinDbg

Job description

Two Six Technologies is seeking a Lead Vulnerability Researcher to guide investigations across hardware, software, and operational systems. You will work with engineers and security researchers to identify critical vulnerabilities, develop PoC code, and mentor junior staff on technical approaches.

The role requires regular on-site support at the Linthicum, Maryland site, with a focus on delivering advanced security solutions to government customers.