Two Six Technologies is seeking a Principal Software Reverse Engineer and Vulnerability Researcher. The role is focused on the exploitation of firmware, applications, and hardware on mobile devices within a team of developers, reverse engineers, and exploitation specialists

Responsibilities Include:

• Identifying vulnerabilities using both static and dynamic analysis techniques.
• Developing proof of concept exploits for identified vulnerabilities.
• Documenting and presenting research findings in useful and accessible ways for team members and customers.
• Leveraging software and hardware exploitation to enable access to protected information.

Minimum Qualifications:

• BS Degree in Computer Science or related technical areas
• Experience in the fields of offensive security, exploit development, reverse engineering, or vulnerability research
• Interested in cybersecurity and passionate about learning new things, taking things apart, and getting stuck into new problems and challenges.
• Understanding of how operating systems function, such as the separation between kernel and userspace.
• Experience in modern scripting languages such as Python
• Minimum of 7 years of experience writing programs in a variety of programming languages, such as C, C , and Objective C
• Experience in understanding at least one Assembly language, such as x86/64, ARM/64, and MIPS
• Experience using disassemblers/decompilers and reverse engineering tools, such as IDA Pro, Ghidra, Hopper, or Binary Ninja
• Must have eligibility/willingness to obtain a Top Secret clearance

Nice If You Have:

• Familiarity with scripting reverse engineering tasks with reverse engineering tools, such as IDA Pro
• Experience in vulnerability research and exploit development on mobile platforms (iOS, Android) or their desktop analogs (macOS, Linux)
• Experience with methods to bypass exploit mitigations and detection techniques
• Familiarity with basic cryptography design and implementation concepts
• Experience with creating and maintaining automated fuzzing solutions.
• Expertise in analyzing crash reports for debugging or identifying vulnerabilities.
• Experience in a client-facing technical role