Senior Embedded Security Software Engineer at Two Six Technologies
Herndon, VA
$128,873–$193,310
Jul 1, 2026
Herndon, VA
Jul 21, 2026
What this job asks for AI summary
This role centers on reverse engineering and forward development of wireless and embedded systems for government customers, working daily at an office in Herndon, Virginia. Day-to-day work involves binary and file system analysis on undocumented firmware targets, rehosting firmware within emulation environments, and translating reverse engineering findings into functional software. It suits engineers with hands-on experience in C/C++, Python, Ghidra or similar tools, and QEMU, who hold an active Top Secret clearance.
Senior level · Washington-Arlington-Alexandria, DC-VA-MD-WV · Top Secret clearance · Full-time
“or” means any one of them counts — you don't need all of them.
Posted 2 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $158,337 (middle half $126,441–$180,105).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The role is classified as Medium confidence between Software Developers (15-1252) and Information Security Analysts (15-1212) because the primary day-to-day work is writing and modifying low-level firmware/software (forward development, rehosting, scripting), but the context is security-oriented reverse engineering — the software development framing ultimately won out.
The JD gates on an active Top Secret clearance and the ability to obtain/maintain TS/SCI. The clearance field is set to TopSecret (the hard gate stated); the TS/SCI upgrade is listed as a capability requirement rather than a current possession requirement.
The role is explicitly on-site daily at the Herndon, VA office (#LI-ONSITE); remote is not available.
No total years of experience are stated in the posting; the overall years minimum is not set.
C and C++ are listed together as a single low-level development requirement; they are emitted as separate skills per the extraction rules but each lists the other as an alternative since the JD treats them as a combined gate.
Ghidra API and Binary Ninja API appear only under the 'Nice to have' section and are preferred, distinct from the base Ghidra/IDA Pro/Binary Ninja reverse engineering tooling which is required.
DevOps best practices and software protection mechanisms appear under 'Nice to have' but name no specific tool; they are omitted per the rule against emitting generic concepts without a named technology.
Requires a Top Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.