Vulnerability Research Lead (On-Site)

Doist; Linthicum (MD); On-site; USD 300,000 - 325,000; Full time

Benefits offered by this job

Health, dental, vision

401(k) matching

Professional development

Flexible PTO

Job summary

Two Six Technologies in Linthicum, Maryland, seeks a Principal Vulnerability Researcher to lead vulnerability research across hardware, software, and operational domains. You’ll develop PoCs, mentor teams, and produce reports for government and commercial clients, with on-site support at the Maryland customer site.

This role requires strong C/C++, Python, Linux skills, and experience with decompilers and vulnerability tools. A TS/SCI with polygraph is required for this position.

Qualifications

• Advanced degree with years of relevant experience in computer science, cybersecurity, or related field.
• Proficiency in C/C++, Python, and at least one ISA (x86/ARM/MIPS).
• Strong Linux command-line skills.
• Experience using decompilers (IDA Pro, Binary Ninja, Ghidra).
• Experience with vulnerability research tools (emulators, fuzzers).
• Experience with debuggers (GDB, WinDbg).
• Ability to work on-site at Linthicum, MD regularly.

Responsibilities

• Lead vulnerability and attack identification across hardware, software, personnel, logistics, and security domains.
• Develop PoC code for identified vulnerabilities.
• Reverse-engineer embedded systems to find vulnerabilities.
• Review source code for risks and vulnerabilities.
• Analyze how vulnerabilities affect mission outcomes and operations.
• Propose countermeasures and document findings for reports and briefings.
• Provide technical leadership and mentor junior engineers.

Skills

Technical leadership

Mentoring

Vulnerability research

Education

PhD in Computer Science or related field

Master's degree in related field

Bachelor's degree in related field

Associate's degree

Tools

IDA Pro

Binary Ninja

Ghidra

GDB

WinDbg

emulators

fuzzers

Job description

Two Six Technologies in Linthicum, Maryland, seeks a Principal Vulnerability Researcher to lead vulnerability research across hardware, software, and operational domains. You’ll develop PoCs, mentor teams, and produce reports for government and commercial clients, with on-site support at the Maryland customer site.

This role requires strong C/C++, Python, Linux skills, and experience with decompilers and vulnerability tools. A TS/SCI with polygraph is required for this position.