Security Patch Verification Engineer (Binary Analysis)

Two Six Technologies; Linthicum (MD); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Retirement plan

Paid leave

Tuition assistance

Professional development

Job summary

Two Six Technologies is seeking a Software Patch Verification Engineer in Linthicum, MD to perform binary patch diffing, root-cause vulnerability analysis, and security validation across patches. The role emphasizes disassembly, dynamic analysis, and regression verification using tools like Ghidra, IDA Pro, BinDiff, and Python scripting.

The ideal candidate has a background in vulnerability analysis, reverse engineering, and strong C/C++/Python skills on Linux.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or related discipline (or equivalent practical experience).
• Demonstrated experience in static and dynamic reverse engineering, binary patch diffing (e.g., BinDiff, Diaphora), and root-cause vulnerability analysis.
• Hands-on proficiency with disassembly tools (Ghidra, IDA Pro, or Binary Ninja), software debuggers (GDB, WinDbg), and executing formal retest/regression checks against software fixes.
• Proven track record benchmarking expected vs. observed patched behavior, evaluating patch vulnerability regressions, and compiling verification evidence for accreditation reporting.
• Strong programming and scripting skills in C, C++, and Python within Linux environments.

Responsibilities

• Evaluate software and firmware patches to perform binary patch diffing and root-cause vulnerability analysis across a high volume of patch vulnerabilities that may introduce new security risks.
• Execute formal retest procedures and regression checks against implemented fixes to benchmark expected versus observed patched behaviors and verify bug closure.
• Support the reproducibility of original vulnerability findings while providing critical verification evidence for system accreditation and reporting.
• Work under minimal supervision with latitude for independent judgment to confirm patch integrity and ensure security fixes completely address target vulnerabilities.
• Document detailed analytical findings and assist with integrating AI-assisted software verification tools into security analysis workflows.

Skills

Reverse engineering

Python

C/C++

Ghidra/IDA

Vulnerability analysis

Education

Bachelor’s degree in CS, Cybersecurity, CE, or equivalent practical experience

Tools

Ghidra

IDA Pro

BinDiff

Binary Ninja

GDB

WinDbg

Dynamic analysis tools

Job description

Two Six Technologies is seeking a Software Patch Verification Engineer in Linthicum, MD to perform binary patch diffing, root-cause vulnerability analysis, and security validation across patches. The role emphasizes disassembly, dynamic analysis, and regression verification using tools like Ghidra, IDA Pro, BinDiff, and Python scripting.

The ideal candidate has a background in vulnerability analysis, reverse engineering, and strong C/C++/Python skills on Linux.