Senior Offensive Cybersecurity Engineer

Parry Labs, LLC•Alexandria, VA

23h

About The Position

You will lead authorized offensive security assessments of software, network interfaces and distributed mission systems. You will identify vulnerabilities, demonstrate their impact and work with engineers to verify fixes. You will report to a functional engineering manager, with technical direction from the Chief Engineer. The target start is November 2026.

Requirements

Bachelor's degree in cybersecurity, computer science, engineering or a related field, or equivalent relevant experience.
7+ years of security engineering experience, including hands-on offensive testing or vulnerability research.
Experience with authorized penetration testing, protocol analysis, fuzzing and vulnerability assessment.
Ability to review Rust or C/C++ and develop security test tooling in Python or a systems language.
Experience analyzing Linux and network behavior, including TCP/IP, service configuration and access controls.
Experience producing reproducible findings, explaining security impact and verifying remediation with engineering teams.
U.S. citizenship and eligibility to obtain and maintain a U.S. government security clearance if required. An active clearance is not required at hire.

Nice To Haves

Experience testing positioning, navigation and timing (PNT), distributed systems or embedded devices.
Knowledge of applied cryptography, post-quantum algorithms, hardware security modules or key management.
Experience with source-code security reviews, secure implementation practices or side-channel analysis.
Experience with DoD security testing, STIG verification or Risk Management Framework assessment evidence.

Responsibilities

Develop threat models and security test plans linked to system requirements and potential failure modes.
Define authorized test scope, rules of engagement and stop conditions with program stakeholders.
Conduct penetration testing, protocol analysis and vulnerability research in approved test environments.
Build protocol and parser fuzzing tools. Add repeatable security checks to automated test workflows.
Assess Linux services and network interfaces. Review Rust or C/C++ code for security weaknesses.
Evaluate authentication, digital signatures, replay protection and key handling with software and cryptographic engineers.
Document reproducible findings, impact and remediation priorities. Retest fixes and preserve test evidence.
Support red-team and blue-team exercises. Keep assessment signoff separate from implementation ownership.