Senior TTP Researcher (Cloud)

Parsons Corporation•Fort Belvoir, VA

About The Position

We are seeking a Senior TTP Researcher (Cloud) to support advanced red team and offensive cyber operations through in-depth research, development, and operationalization of adversary tactics, techniques, and procedures (TTPs. This role focuses on cloud-based cyberspace operations, adversarial emulation, and the development of bespoke offensive capabilities aligned with real-world threat actors. The ideal candidate has experience working alongside advanced cyber red teams, translating threat research into executable tradecraft, and maintaining awareness of evolving industry and government developments impacting cloud-focused offensive operations.

Requirements

Active TS/SCI Clearance
10-15 years of combined education and experience supporting Cyberspace operations with at least 4 of those years working with: Advanced cyber red teams, Adversarial emulation operations, or Development of TTPs for offensive cyber operations
Must have Demonstrated experience: Weaponizing and implementing n-day vulnerabilities and developing bespoke persistence methods
Must have a strong understanding of offensive cyber tradecraft and adversary behaviors
Demonstrated expertise in cloud-based cyberspace operations and exploitation
Familiarity with both industry and government developments related to cloud security and offensive cyber operations
Must be willing to travel 15%- OCONUS and CONUS locations

Nice To Haves

Strong industry experience performing advanced TTP research
Experience supporting Digital Network Exploitation (DNE) activities in cloud environments
Experience researching or operating against: IaaS, PaaS, and SaaS cloud platforms
Ability to translate threat intelligence into actionable offensive techniques
Strong analytical, technical writing, and briefing skills
Desired Certifications Offensive or red team certifications such as: OSCP, OSEP, CRTO; GIAC (GXPN, GPEN); Cloud security certifications (AWS, Azure, GCP security-focused)

Responsibilities

Conduct advanced TTP research focused on cloud-based adversaries and offensive cyber operations
Research, develop, and document adversarial TTPs for use in red team assessments and offensive missions
Support adversarial emulation by mapping real-world threat actor behaviors to operational techniques
Weaponize and implement n-day vulnerabilities in support of offensive cyber operations
Design and develop bespoke persistence mechanisms in cloud and hybrid environments
Analyze industry and government reporting to track emerging cloud threats, techniques, and trends
Collaborate with red team operators, exploit developers, and mission leads to transition research into operational capabilities
Produce high-quality technical documentation, tradecraft guidance, and briefings