T

Two Six Technologies

Defense-focused tech firm delivering cyber solutions

Vulnerability Research Analyst

Offensive Security & TestingConfirmed live in the last 24 hours
Full-timeLinthicum Heights, MD, USA$157.8k - $236.8k /yrIn-person

About the Job

Requirements

  • An active U.S. Top Secret/SCI security clearance with polygraph is required, and the candidate must be willing to obtain and maintain a polygraph clearance.
  • A degree in Computer Science, Computer Engineering, Information Security, or equivalent practical experience is required.
  • Experience in vulnerability research, static source code analysis, reverse engineering, or software security audits is required.
  • A solid understanding of memory management, pointer arithmetic, and common software security flaws in compiled and managed languages is required.
  • Familiarity with automated static and dynamic code analysis concepts and AI-driven automation tools is required.

Responsibilities

  • Perform static and dynamic software vulnerability analysis on pre-extracted COTS/GOTS source code repositories and firmware images.
  • Deploy AI-guided fuzzing and automated vulnerability detection suites to evaluate complex software architectures and identify high-risk logic flaws.
  • Validate automated tool output by tracing execution paths in code to determine root causes and real-world exploitability.
  • Develop custom CodeQL queries, Semgrep rules, and Abstract Syntax Tree-based detection signatures to codify newly discovered bug patterns and automate regression testing across software evaluations.
  • Present vulnerability perspectives, risk assessments, and testing metrics to program managers, stakeholders, and intelligence community partners.

Desired Qualifications

  • Experience authoring or tuning custom static analysis rules using CodeQL, Semgrep, or Tree-sitter parsers.
  • Familiarity with firmware emulation tools and frameworks, such as QEMU, Unicorn Engine, Avatar2, or Ghidra/IDA emulator plugins, to run extracted binaries without physical hardware.
  • Experience creating or adapting custom test drivers, stubs, and harness interfaces for unit-level software execution.
  • Knowledge of machine learning applications in automated bug discovery, symbolic execution, or AI-assisted code analysis.
  • Prior experience delivering technical vulnerability assessments on Department of Defense or intelligence community defense programs.

About the Company

Two Six Technologies

Defense-focused tech firm delivering cyber solutions

Two Six Technologies delivers advanced defense-focused tech through rapid R&D in cybersecurity, information operations, data science, electronic systems, mobility, and user experience for U.S. national security clients. Its products and services are built via project-based government contracts, creating custom tools (such as Pulse) tailored to mission needs. The company differentiates itself through direct government partnerships, interdisciplinary expertise, and a focus on delivering mission-ready, actionable solutions rather than generic tech. Its goal is to provide technological superiority for the United States and its partners by enabling rapid, impactful innovation that strengthens national security and defense capabilities.

Company size
501-1,000
Company stage
Early VC
Total funding
$67.9M
Headquarters
Arlington County, VA
Founded
2021

Recently Posted Jobs

Explore more opportunities at Two Six Technologies

See more jobs