Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related technical field
10+ years of related professional experience; Master's degree and 8+ years of related professional experience
Proficiency with disassemblers/decompilers (IDA Pro, Ghidra, and/or Binary Ninja)
Strong understanding of x86/x64/ARM assembly language and processor architectures
Practical experience with debuggers (WinDbg, GDB, and/or LLDB) and dynamic analysis tools
Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust applications)
Responsibilities
Perform technical analysis of target platforms to discover zero-day vulnerabilities through fuzzing and code analysis
Reverse engineer software applications, firmware, and hardware components using disassemblers and binary analysis tools
Conduct vulnerability discovery through automated fuzzing, manual code review, and dynamic/static analysis techniques
Rapidly prototype proof-of-concept exploits to validate vulnerability findings
Analyze target system architectures and security mechanisms to identify attack surfaces
Document vulnerability technical details and recommended capability development approaches
Provide technical intelligence briefs to capability developers on target system weaknesses
Benefits
Collaborative work environment with capability development teams
Opportunity to work on mission-critical solutions
Exposure to cutting-edge vulnerability research and reverse engineering techniques
Limited travel opportunities as mission requires
Engagement with a community of experts in offensive cyber operations
Full Job Description
LCAT Description
Degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university. Experience in software development on projects related to Computer Network Operations analytic and cloud development.
Job Profile:
SOFTWARE ENGINEER, PRINCIPAL (Salary)
Recruiting Instruction (Requisition Type):
Direct Labor A - Funded; No Client Approval To Hire
Job Description:
Parsons is looking for an amazingly talented Vulnerability Researcher/Reverse Engineer to join our team! In this role you will get to conduct advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development.
What You'll Be Doing:
Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
Perform vulnerability discovery through automated fuzzing, manual code review, and dynamic/static analysis techniques.
Rapidly prototype proof-of-concept exploits to validate vulnerability findings and assess operational utility.
Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.
Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.
Collaborate with capability development teams to translate vulnerability research into operational tools.
Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
Apply offensive cyber domain expertise, including red/purple team operations, to develop and deliver mission-critical solutions.
Conduct limited TDY travel as mission requires.
What Required Skills You'll Bring:
Active TS/SCI with Poly
Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related technical field
10+ years of related professional experience; Master's degree and 8+ years of related professional experience
Proficiency with disassemblers/decompilers (IDA Pro, Ghidra, and/or Binary Ninja)
Strong understanding of x86/x64/ARM assembly language and processor architectures
Practical experience with debuggers (WinDbg, GDB, and/or LLDB) and dynamic analysis tools
Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust applications)
Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions)
Proficiency with fuzzing frameworks (AFL, libFuzzer, Honggfuzz) and corpus management
Strong scripting skills (Python, Ruby, or similar) for automation and analysis
Experience documenting technical research for both technical and operational audiences
What Desired Skills You'll Bring:
USCC JQR qualified Joint Qualification Record
Experience with Windows kernel/driver reverse engineering
Firmware analysis and embedded systems reverse engineering
Network protocol analysis and vulnerability research
Experience with UEFI/BIOS or bootloader security analysis
Published vulnerability research (CVEs, conference presentations, blog posts)
Familiarity with symbolic execution and taint analysis tools
Understanding of offensive cyberspace operations workflows
Prior experience in offensive cyber operations, red/purple team activities, or equivalent work from a contract/civilian position
