Application Security Engineer: Exploit Discovery & Fixes

Parallels; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Parallels is seeking a highly motivated Application Security Engineer to join our team. In this role, you will make security decisions that impact millions of our customers while gaining hands‑on experience in exploit development and CVE discovery.

You will coordinate with senior engineers to design fixes for vulnerabilities, search for new high-risk issues, and support secure development practices across the codebase.

Qualifications

• Bachelor's or Master’s degree in computer science or a related field.
• Experience finding CVEs in desktop/web applications and exploiting vulnerabilities.
• Proficiency with reverse engineering and debugging tools.
• Significant experience with memory exploitation techniques and security testing.

Responsibilities

• Reproduce and triage vulnerabilities from security programs; propose fixes to engineers.
• Discover vulnerabilities and construct exploits for Parallels applications.
• Assist in CVE disclosure processes and threat modeling.
• Provide design reviews for security across teams and risk mitigation.
• Triage and tune static/dynamic analysis and dependency tools.

Skills

Offensive security

C/C++

Python

Vulnerability assessment

Memory exploitation

Web exploitation

Communication

Education

BSc/MS in computer science or related field

OSCP/OSWE/OSED/RET2 certifications

Tools

Reverse engineering tools

Job description

Parallels is seeking a highly motivated Application Security Engineer to join our team. In this role, you will make security decisions that impact millions of our customers while gaining hands‑on experience in exploit development and CVE discovery.

You will coordinate with senior engineers to design fixes for vulnerabilities, search for new high-risk issues, and support secure development practices across the codebase.