Software Vulnerability Analyst: Patch Diffing & Validation

GrammaTech; Maryland; On-site; USD 150,000 - 215,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan with companyCon

Paid holidays, PTO, sick and personal

Job summary

GrammaTech is actively seeking a Software Vulnerability Analyst to join our Linthicum, Maryland team. The role focuses on binary patch diffing, root-cause vulnerability analysis, and security validation.

Proficiency with Ghidra/IDA Pro and diffing tools is required, with strong C/C++/Python skills. The position involves evaluating patches, confirming patch integrity, and documenting findings while integrating AI-assisted verification tools into security workflows.

Qualifications

• Experience in static and dynamic reverse engineering, binary patch diffing, and software vulnerability analysis.
• Proficiency with disassembly tools (Ghidra, IDA Pro, Binary Ninja) and debuggers (GDB, WinDbg).
• Proven track record performing root-cause analysis on software vulnerabilities and validating patch mitigation.
• Strong programming in C, C++, Python under Linux.

Responsibilities

• Evaluate software and firmware patches to perform binary patch diffing and root-cause vulnerability analysis.
• Work under minimal supervision with latitude for independent judgment to confirm patch integrity and ensure fixes address vulnerabilities.
• Document detailed analytical findings, validate security fixes, and assist with integrating AI-assisted verification tools into workflows.

Skills

Reverse engineering

Binary patch diffing

Vulnerability analysis

Disassembly tools

GDB/WinDbg

C/C++/Python

AI/ML in code analysis

Tools

Ghidra

IDA Pro

Binary Ninja

BinDiff

Diaphora

Job description

GrammaTech is actively seeking a Software Vulnerability Analyst to join our Linthicum, Maryland team. The role focuses on binary patch diffing, root-cause vulnerability analysis, and security validation.

Proficiency with Ghidra/IDA Pro and diffing tools is required, with strong C/C++/Python skills. The position involves evaluating patches, confirming patch integrity, and documenting findings while integrating AI-assisted verification tools into security workflows.