Drimva

Two Six Technologies

Lead Vulnerability Researcher

$117K–$210K

Dayton, Ohio +1 · Full-time · Posted Oct 25, 2026

Location
Dayton, Ohio
Beavercreek, Ohio, United States
Experience
Extensive experience required; no specific number of years stated.
Education
Bachelor’s Degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field.
Visa sponsorship
Active US Secret clearance with the ability to obtain and maintain TS/SCI.

About the job

Leads vulnerability research on wireless and embedded systems, setting research strategies, guiding technical teams, and translating government customer needs into technical work.

What you'll do

  • Lead large-scale vulnerability research projects and architect approaches for complex embedded and wireless systems.
  • Mentor researchers through code reviews and knowledge sharing; serve as a technical point of contact for customers.
  • Improve research capabilities with tools, automation, and methodologies, and present findings to customers.

What they ask for

  • Bachelor’s Degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field.
  • Extensive experience in vulnerability research, reverse engineering, or CNO development; proven vulnerability discovery or exploit-development record.
  • Expert proficiency with Ghidra, IDA Pro, or Binary Ninja; advanced assembly and OS internals knowledge; proficiency with GDB or WinDBG.
  • Active US Secret clearance and ability to obtain and maintain TS/SCI; experience in technical leadership or project lead capacity.

Nice to have

  • Experience with RFPs, white papers, or grant proposals; defeating ASLR, DEP, or CFG on non-standard architectures.
  • Knowledge of cellular standards or low-bandwidth communications; published research, conference presentations, or CVE credits; client-facing government technical lead experience.

Pay

$117,235 — $210,058 USD (base salary)

Tools

Ghidra, IDA Pro, Binary Ninja, x86, ARM, MIPS, TCP/IP, GDB

Model-written summary · the original posting is authoritative

First seen Oct 29, 2026 · Last verified Nov 5, 2026 (UTC)