Poly

Parsons Corporation•Columbia, MD

7d•$125,100 - $225,200

About The Position

Parsons is seeking a Senior Vulnerability Researcher/Reverse Engineer for its Federal Solutions team. The role conducts advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development. The work includes analyzing target platforms, applications, firmware, hardware, architectures, protocols, and security mechanisms; finding and validating vulnerabilities; and translating research into operational capabilities. The position requires an active TS/SCI clearance with polygraph and may involve limited TDY travel as mission requires.

Requirements

Active TS/SCI security clearance with polygraph.
Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field.
10+ years of related professional experience; alternatively, a master's degree and 8+ years of related professional experience.
Proficiency with disassemblers/decompilers such as IDA Pro, Ghidra, and/or Binary Ninja.
Strong understanding of x86/x64/ARM assembly language and processor architectures.
Practical experience with debuggers such as WinDbg, GDB, and/or LLDB, and dynamic analysis tools.
Demonstrated ability to discover vulnerabilities in compiled software, including C/C++/Rust applications.
Understanding of common vulnerability classes, including memory corruption, logic flaws, and race conditions.
Proficiency with fuzzing frameworks such as AFL, libFuzzer, and Honggfuzz, and corpus management.
Strong scripting skills in Python, Ruby, or a similar language for automation and analysis.
Experience documenting technical research for technical and operational audiences.

Nice To Haves

USCC JQR qualified Joint Qualification Record.
Experience with Windows kernel/driver reverse engineering.
Firmware analysis and embedded systems reverse engineering experience.
Network protocol analysis and vulnerability research experience.
Experience with UEFI/BIOS or bootloader security analysis.
Published vulnerability research, such as CVEs, conference presentations, or blog posts.
Familiarity with symbolic execution and taint analysis tools.
Understanding of offensive cyberspace operations workflows.
Prior experience in offensive cyber operations, red/purple team activities, or equivalent work from a contract/civilian position.

Responsibilities

Analyze target platforms and discover zero-day vulnerabilities through fuzzing and code analysis.
Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
Discover vulnerabilities through automated fuzzing, manual code review, and dynamic and static analysis.
Prototype proof-of-concept exploits to validate findings and assess operational utility.
Analyze target architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
Document vulnerability details, exploitation methods, and recommended approaches for capability development.
Provide technical intelligence briefs to capability developers on system weaknesses and exploitation pathways.
Collaborate with capability development teams to translate vulnerability research into operational tools.
Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
Apply offensive cyber expertise, including red/purple team operations, to develop and deliver mission-critical solutions.
Conduct limited TDY travel as mission requires.