Principal Mobile Vulnerability Researcher

Overview of Opportunity 

Two Six Technologies is seeking a skilled Principal Mobile Vulnerability Researcher to join our team in northern Virginia. The successful candidate will work on identifying and exploiting vulnerabilities in firmware, applications, and hardware on mobile devices, collaborating with a dedicated team of developers, reverse engineers, and exploitation specialists. A deep passion for cybersecurity, problem-solving, and continuous learning is essential for this role.

Responsibilities:

• Vulnerability Identification and Exploitation: Identify and exploit vulnerabilities such as memory corruption through stack overflows, heap overflows, integer overflows, and logical flaws.
• Exploit Mitigation Bypass: Overcome mitigations like ASLR, code signing, non-executable memory protections, and sandboxing.
• Technique Enhancement: Refine and combine exploitation techniques to assess severity.
• Automation: Automate the identification of vulnerabilities, triggering mechanisms, and optimization of exploits.
• Technical Leadership: Provide technical and functional direction, developing and implementing techniques to ensure customer satisfaction.

Minimum Qualifications:

• Security Clearance: Active Top Secret Clearance.
• Education: BS Degree in Computer Science or related technical fields.
• Experience:
• Proven experience in vulnerability research, reverse engineering, and exploit development on mobile platforms (iOS, Android) or their desktop counterparts (macOS, Linux).
• Minimum of 7 years of experience in programming with languages such as C, C++, and Objective C.
• Proficiency in at least one Assembly language (e.g., x86/64, ARM/64, MIPS).
• Expertise in using disassemblers/decompilers and reverse engineering tools like IDA Pro, Ghidra, Hopper, or Binary Ninja.
• Experience with modern scripting languages such as Python.
• Knowledge: Strong understanding of operating systems, including the separation between kernel and user space.

Preferred Qualifications:

• Wireless Communications: Knowledge of Bluetooth, Wi-Fi, or cellular internals and their interactions with mobile devices.
• Client Interaction: Experience in a client-facing technical role.
• Exploit Mitigations: Familiarity with methods to bypass exploit mitigations and detection techniques.
• Cryptography: Basic understanding of cryptography design and implementation.
• Fuzzing Solutions: Experience with creating and maintaining automated fuzzing solutions.
• Crash Analysis: Expertise in analyzing crash reports for debugging or identifying vulnerabilities.

Clearance Requirements:

• Active Top Secret Clearance.

#LI-ZS1

#LI-HYBRID