Drimva

Two Six Technologies

Lead Vulnerability Researcher ($285k+/year + Sign-On Bonus)

$285K–$300K

Linthicum, Maryland +1 · Full-time · Posted Aug 13, 2026

Location
Linthicum, Maryland
Customer Site - Linthicum, MD
Experience
Doctorate and 4 years, OR Master’s degree and 6 years, OR Bachelor’s degree and 8 years, OR Associate’s degree and 10 years of relevant experience.
Education
Doctorate in Computer Science, Computer/Electrical Engineering, or a related field; Master’s, Bachelor’s, or Associate’s degree alternatives as stated.

About the job

Leads vulnerability research across hardware, software, and operational systems, identifying attacks and developing operationally effective countermeasures.

What you'll do

  • Lead vulnerability investigations, reverse-engineer embedded systems, review source code, and develop proof-of-concept code.
  • Assess mission and operational impacts of vulnerabilities and recommend countermeasures; produce reports and briefings.
  • Provide technical leadership and mentorship, including prioritizing research and reviewing methodologies and proof-of-concepts.

What they ask for

  • Proficiency in C/C++, Python, and at least one ISA (e.g. x86/ARM/MIPS); proficiency in Linux command-line environments.
  • Experience using a decompiler, vulnerability research tools such as emulators or fuzzers, and a software debugger.
  • Ability to work regularly on-site at the Linthicum, Maryland customer site.
  • Active TS/SCI clearance with Polygraph required.

Nice to have

  • Experience translating vulnerabilities into operationally relevant impact assessments and countermeasures, or producing client-facing technical briefings.
  • Experience with hardware debuggers, UART, SPI, I2C, TLS or SSH, embedded firmware, RTOS, networked systems, or high-side environments.

Pay

$284,999 — $300,000 USD (annualized base salary)

Tools

C/C++, Python, x86/ARM/MIPS, Linux, IDA Pro, Binary Ninja, Ghidra, GDB or WinDbg

Model-written summary · the original posting is authoritative

First seen Oct 29, 2026 · Last verified Nov 6, 2026 (UTC)