Firmware Reverse Engineer

Job ID: 326

Two Six Technologies is seeking a Firmware Reverse Engineer. You will work with a range of clients from the country’s largest ISPs to home security providers to innovative tech startups. You will become a trusted advisor while learning and performing valuable technical and industry skills. This role is technical at its core – with a strong focus on in-depth reverse engineering, exploit development, as well as the development of tools to aid in the reverse engineering process.

Since we are a small team, you will not be lost in the shuffle. You will be a key player in a small fast paced team, owning your own projects and developing client relationships. Reporting directly to our lead Reverse Engineer, you will have access to top experts in the field with experience across a range of domains. You will have numerous opportunities to define your work.

Day In & Day Out Responsibilities:
Given the technical nature of this role, experience in computer science, computer engineering, or a similar field is required. Significant proven experience in reverse engineering (RE) or vulnerability research (VR) can show your fit even if your background is outside of one of these fields.

You should be comfortable taking on complex technical problems for which there is often no known answer. You should be comfortable with ambiguity and forging your own path; our small team setting will provide you opportunity for outsized impact. While you will receive extensive training, mentorship, and coaching, you must be comfortable executing against goals independently since there’s no playbook for breaking unique complex systems.

Keys for Success- Required:

• Bachelor’s (or higher) degree in computer science, engineering, or a related field (solid knowledge in RE or VR may substitute for a specific degree)
• Minimum 3 years of experience with common disassemblers/decompilers and reverse engineering tools (IDA, Ghidra, Binary Ninja)
• Minimum 3 years of experience with software reverse engineering concepts: static analysis, dynamic analysis, fuzzing techniques
• Minimum 3 years of experience developing with low-level programming languages (C and at least one assembly language), scripting languages (e.g., Python), and the *nix command line
• Strong familiarity with common bug classes, bad practices, and exploit/PoC development

Bonus Points, but not expected:

• Eligibility to receive a US security clearance (or an active clearance)
• Active Security Clearance (Secret or Top Secret)
• Experience in a client-facing technical role
• Familiarity with Binary Ninja API or Ghidra scripting
• Familiarity building or securing embedded devices and other digital systems
• Familiarity with embedded binary reverse engineering (ARM, RTOS, etc.)
• Familiarity with basic cryptography design and implementation concepts

Clearance Requirements:

• Eligibility for Security clearance