Software Patch Verification Engineer
Two Six Technologies · Linthicum, Maryland
About this role
**Two Six Technologies — Software Patch Verification Engineer** **Location:** Linthicum, Maryland ## Overview Two Six Technologies is seeking a **Software Patch Verification Engineer** to join a team focused on **binary patch diffing**, **root-cause vulnerability analysis**, and **software security validation**. The role supports verification of security fixes through analysis, formal regression checks, and evidence generation for accreditation and reporting. ## What you will do - Evaluate **software and firmware patches** using **binary patch diffing** and **root-cause vulnerability analysis** across a high volume of patch vulnerabilities. - Execute **formal retest procedures** and **regression checks** to compare expected vs. observed patched behavior and verify bug closure. - Support **reproducibility** of original vulnerability findings and provide verification evidence for **system accreditation** and reporting. - Work with **minimal supervision**, applying independent judgment to confirm **patch integrity** and ensure mitigations fully address target vulnerabilities. - Document detailed analytical findings and assist with integrating **AI-assisted software verification tools** into security analysis workflows. ## What you will need (basic qualifications) - Bachelor’s degree in **Computer Science, Cybersecurity, Computer Engineering**, or related field (or equivalent practical experience). - Experience in **static and dynamic reverse engineering**, **binary patch diffing** (e.g., **BinDiff, Diaphora**), and **root-cause vulnerability analysis**. - Hands-on proficiency with **disassembly tools** (e.g., **Ghidra, IDA Pro, Binary Ninja**), **debuggers** (e.g., **GDB, WinDbg**), and formal **retest/regression checks**. - Proven ability to benchmark **expected vs. observed** patched behavior, evaluate patch regressions, and compile verification evidence for accreditation reporting. - Strong programming/scripting skills in **C, C++, and Python** in **Linux** environments. ## Nice to have (preferred) - Experience applying **AI/ML** models or **LLM frameworks** to code analysis, defect detection, or automated patch verification. - Familiarity with **dynamic instrumentation** (e.g., **Frida, DynamoRIO**) or automated fuzzing engines. - Knowledge of OS security mitigations (**ASLR, DEP, CFI, Stack Canaries**) and common vulnerability patterns (**CWEs**). ## Clearance Requirements - **Active US Security clearance: Top Secret/SCI with Polygraph required** ## Compensation (projected) - **$132,123 — $198,184 USD** (annualized; guideline only) #LI-CM1 #LI-ONSITE
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.