Software Vulnerability Analyst: Patch Diffing & RE

Socket.dev; Linthicum (MD); On-site; USD 148,000 - 222,000; Full time

Job summary

Two Six Technologies in Linthicum, MD is seeking a Software Vulnerability Analyst to join the Trusted Electronics and Effects team. You will evaluate patches, perform binary patch diffing, and conduct root-cause vulnerability analysis to verify security fixes across target systems.

The role requires hands-on reverse engineering with tools like Ghidra or IDA Pro, experience in BinDiff/Diaphora, and strong C/C++/Python skills in Linux. On-site presence in Maryland is expected.

Qualifications

• Bachelor’s degree or equivalent practical experience in a related technical discipline.
• Experience in static and dynamic reverse engineering, binary patch diffing, and software vulnerability analysis.
• Proficiency with disassembly tools and software debuggers (Ghidra, IDA Pro, Binary Ninja; GDB/WinDbg).
• Proven track record performing root‑cause analysis on software vulnerabilities and validating patch mitigation.
• Strong programming and scripting skills in C, C++ and Python in Linux environments.
• Ability to provide on‑site support in Linthicum, MD daily.

Responsibilities

• Evaluate software and firmware patches to perform binary patch diffing and root‑cause vulnerability analysis.
• Work under minimal supervision with latitude for independent judgment to confirm patch integrity and secure fixes.
• Document analytical findings, validate fixes, and assist with AI‑assisted software verification tools integration.

Skills

Reverse engineering

Binary diffing

Vulnerability analysis

C/C++

Python

Linux

Education

Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or related

Tools

Ghidra

IDA Pro

Binary Ninja

GDB

WinDbg

BinDiff

Diaphora

Job description

Two Six Technologies in Linthicum, MD is seeking a Software Vulnerability Analyst to join the Trusted Electronics and Effects team. You will evaluate patches, perform binary patch diffing, and conduct root-cause vulnerability analysis to verify security fixes across target systems.

The role requires hands-on reverse engineering with tools like Ghidra or IDA Pro, experience in BinDiff/Diaphora, and strong C/C++/Python skills in Linux. On-site presence in Maryland is expected.