Software Vulnerability Analyst: Patch Vetting & RE

Two-Six-Technologies; Laurel (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

Two Six Technologies in Linthicum, Maryland is seeking a Software Vulnerability Analyst to join our Trusted Electronics and Effects team. You will evaluate software and firmware patches, perform binary patch diffing, and root-cause vulnerability analysis to verify mitigation across target systems.

Proficiency with Ghidra, IDA Pro, BinDiff, Diaphora, and dynamic analysis tools, plus programming in C/C++/Python on Linux, is required. On-site work in Linthicum is required daily.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or related technical discipline or equivalent practical experience.
• Experience in static and dynamic reverse engineering, binary patch diffing (BinDiff, Diaphora), and software vulnerability analysis.
• Hands-on proficiency with disassembly tools (Ghidra, IDA Pro, Binary Ninja) and software debuggers (GDB, WinDbg).
• Proven track record performing root-cause analysis on software vulnerabilities and validating patch mitigation effectiveness.
• Strong programming and scripting skills in C, C++, and Python within Linux environments.
• Ability to provide on-site support in Linthicum, Maryland daily.

Responsibilities

• Evaluate software and firmware patches to perform binary patch diffing and root-cause vulnerability analysis in support of national security research missions.
• Work under minimal supervision with latitude for independent judgment to confirm patch integrity and ensure security fixes completely address target vulnerabilities.
• Document detailed analytical findings, validate security fixes, and assist with integrating AI-assisted software verification tools into security analysis workflows.

Skills

Reverse engineering

Binary patch diffing

Vulnerability analysis

Ghidra

IDA Pro

Python

C/C++

Education

Bachelor’s degree in Computer Science or related field

Tools

BinDiff

Diaphora

Ghidra

IDA Pro

Binary Ninja

GDB

Job description

Two Six Technologies in Linthicum, Maryland is seeking a Software Vulnerability Analyst to join our Trusted Electronics and Effects team. You will evaluate software and firmware patches, perform binary patch diffing, and root-cause vulnerability analysis to verify mitigation across target systems.

Proficiency with Ghidra, IDA Pro, BinDiff, Diaphora, and dynamic analysis tools, plus programming in C/C++/Python on Linux, is required. On-site work in Linthicum is required daily.