Principal Vulnerability Researcher Engineer (TS)

Principal Vulnerability Research EngineerParsons is seeking a Principal Vulnerability Research Engineer to join our team in support of advanced research and development contracts for the U.S. Government. You'll serve as a senior technical leader on a small, highly technical team performing vulnerability research and reverse engineering against complex embedded and cyber-physical systems.

The role involves leading technically challenging research from initial target analysis through vulnerability discovery, exploit development, and integration into operational cyber capabilities while defining technical approaches and advancing the team's vulnerability research capabilities.As a Senior Vulnerability Research Engineer, you'll serve as an experienced hands-on technical contributor while helping guide less experienced researchers through complex technical challenges. You'll have the opportunity to work across the full vulnerability research lifecycle, develop new tools and techniques, and contribute to technically challenging research efforts involving software, firmware, hardware, and communications interfaces.This is an onsite position based at the Cromulence-Parsons office in the historic downtown of Melbourne, Florida, on Florida's Space Coast. Work will be performed in both classified and unclassified environments.What You'll Be Doing:Lead vulnerability research / reverse engineering (VR/RE) efforts against complex embedded systems, including both hardware and software targetsDevelop, test, and integrate advanced cyber tools, exploits, cyber effects, and supporting research capabilitiesDefine technical approaches for complex vulnerability research problems and guide research efforts from initial target analysis through successful capability developmentServe as a principal technical contributor while remaining deeply hands-on with reverse engineering, vulnerability discovery, exploit development, and tool developmentProvide technical leadership and direction to teams of vulnerability researchers working on large-scale or technically challenging cyber effortsMentor senior and junior researchers and help develop the technical capabilities of the broader research teamIdentify and develop new vulnerability research methodologies, tools, automation, and emulation techniques that improve the team's ability to analyze complex targetsWork directly with customers and technical stakeholders to understand challenging mission problems, evaluate technical feasibility, and develop effective research approachesWhat Qualifications You'll Bring:Bachelor's degree in related technical field and 10+ years of professional related experience; Master's degree in related field will be considered in lieu of 4 years' experience10+ years of hands-on experience in vulnerability research, reverse engineering, exploit development, and/or cyber tool developmentExtensive experience with a decompiler/disassembler such as Ghidra (highly preferred), IDA Pro, or Binary NinjaDeep expertise analyzing one or more instruction set architectures, such as x86/x86-64, ARM/AArch64, or MIPSExtensive experience with modern exploitation techniques, tools, and methodologiesExtensive experience analyzing and bypassing modern exploit mitigations such as DEP/NX, ASLR, stack protections, CFI, and platform-specific protectionsDemonstrated ability to independently lead complex vulnerability research efforts from initial target analysis through exploit or capability developmentDemonstrated ability to provide technical direction and mentorship to other vulnerability researchersStrong software development skills in languages such as C, C++, and PythonWhat Desired Skills You'll Bring:15+ years of experience in vulnerability research, reverse engineering, exploit development, and/or cyber tool developmentDeep experience reverse engineering embedded and Internet of Things (IoT) systems or cyber-physical devices such as Industrial Control Systems (ICS)Expertise with Windows Internals and/or Linux kernel-level programmingExperience developing, modifying, or enhancing emulation systems such as QEMU to enable advanced vulnerability research techniquesExperience developing custom emulation, instrumentation, fuzzing, symbolic execution, or dynamic analysis capabilitiesDeep knowledge of multiple processor architectures and operating system environmentsExperience with additional operating systems such as Android, iOS, and macOSAdvanced knowledge of networking protocols, protocol reverse engineering, and network-based exploitationExperience developing for Windows and/or Linux platformsExperience reverse engineering firmware, bootloaders, device drivers, kernels, and other low-level software componentsExperience analyzing hardware interfaces, peripherals, communications buses, and other components of embedded or cyber-physical systemsDemonstrated history of developing new vulnerability research techniques, tools, methodologies, or technical approachesExperience serving as a technical lead on large, complex, or multi-researcher cyber effortsSecurity Clearance Requirement:An active Top Secret clearance is required to applyMust be able to obtain and maintain SCI and/or SAP accessesU.S. Citizenship is requiredSalary Range: $125,100.00 - $225,200.00Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.