Principal Vulnerability Researcher Engineer (TS)

Parsons; Melbourne (FL); On-site; USD 160,000 - 230,000; Full time

Job summary

Parsons in Melbourne, FL is seeking a Principal Vulnerability Research Engineer to lead vulnerability research and reverse engineering on embedded systems for government-related projects. The role blends hands-on work with mentoring a team of researchers, across hardware, firmware, and software domains.

You will guide vulnerability research from target analysis through exploit development, tooling, and integration into capabilities, working onsite on Space Coast in a fast-paced,

Qualifications

• Bachelor's degree in a technical field required; 10+ years in related work; Master’s may substitute 4 years.
• 10+ years hands-on vulnerability research, reverse engineering, exploit development, or cyber tool development.
• Deep experience with decompilers/disassemblers (Ghidra preferred) and other tools.
• Strong knowledge of instruction set architectures (x86/x64, ARM/AArch64, MIPS).
• Experience exploiting mitigations and modern protections (DEP/NX, ASLR, CFI).
• Ability to lead complex VR/RE efforts and mentor others.
• Proficiency in C, C++, and Python.

Responsibilities

• Lead VR/RE efforts against complex embedded systems (hardware and software).
• Develop, test, and integrate advanced cyber tools and exploits.
• Define technical approaches from target analysis to capability development.
• Provide technical leadership and mentorship to vulnerability researchers.
• Collaborate with customers and stakeholders to understand mission problems.

Skills

Vulnerability research

Reverse engineering

Exploit development

Cyber tool development

Decompiler/Disassembler

Architectures (x86/x64, ARM, MIPS)

Exploit mitigations (DEP, ASLR, CFI)

Technical leadership

C/C++ and Python

Windows/Linux internals

Education

Bachelor's degree in a related technical field

Master's degree in related field (considered in lieu of 4 years)

Tools

Ghidra

IDA Pro

Binary Ninja

QEMU

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible.

Job Description

Parsons is seeking a Principal Vulnerability Research Engineer to join our team in support of advanced research and development contracts for the U.S. Government. You'll serve as a senior technical leader on a small, highly technical team performing vulnerability research and reverse engineering against complex embedded and cyber-physical systems. The role involves leading technically challenging research from initial target analysis through vulnerability discovery, exploit development, and integration into operational cyber capabilities while defining technical approaches and advancing the team's vulnerability research capabilities.

As a Senior Vulnerability Research Engineer, you'll serve as an experienced hands-on technical contributor while helping guide less experienced researchers through complex technical challenges. You'll have the opportunity to work across the full vulnerability research lifecycle, develop new tools and techniques, and contribute to technically challenging research efforts involving software, firmware, hardware, and communications interfaces.

This is an onsite position based at the Cromulence-Parsons office in the historic downtown of Melbourne, Florida , on Florida's Space Coast. Work will be performed in both classified and unclassified environments.

What You'll Be Doing

• Lead vulnerability research / reverse engineering (VR/RE) efforts against complex embedded systems, including both hardware and software targets
• Develop, test, and integrate advanced cyber tools, exploits, cyber effects, and supporting research capabilities
• Define technical approaches for complex vulnerability research problems and guide research efforts from initial target analysis through successful capability development
• Serve as a principal technical contributor while remaining deeply hands-on with reverse engineering, vulnerability discovery, exploit development, and tool development
• Provide technical leadership and direction to teams of vulnerability researchers working on large-scale or technically challenging cyber efforts
• Mentor senior and junior researchers and help develop the technical capabilities of the broader research team
• Identify and develop new vulnerability research methodologies, tools, automation, and emulation techniques that improve the team's ability to analyze complex targets
• Work directly with customers and technical stakeholders to understand challenging mission problems, evaluate technical feasibility, and develop effective research approaches

What Qualifications You'll Bring

• Bachelor's degree in related technical field and 10+ years of professional related experience; Master's degree in related field will be considered in lieu of 4 years' experience
• 10+ years of hands-on experience in vulnerability research, reverse engineering, exploit development, and/or cyber tool development
• Extensive experience with a decompiler/disassembler such as Ghidra (highly preferred), IDA Pro, or Binary Ninja
• Deep expertise analyzing one or more instruction set architectures, such as x86/x86-64, ARM/AArch64, or MIPS
• Extensive experience with modern exploitation techniques, tools, and methodologies
• Extensive experience analyzing and bypassing modern exploit mitigations such as DEP/NX, ASLR, stack protections, CFI, and platform-specific protections
• Demonstrated ability to independently lead complex vulnerability research efforts from initial target analysis through exploit or capability development
• Demonstrated ability to provide technical direction and mentorship to other vulnerability researchers
• Strong software development skills in languages such as C, C++, and Python

What Desired Skills You'll Bring

• U.S. Citizenship is required
• 15+ years of experience in vulnerability research, reverse engineering, exploit development, and/or cyber tool development
• Deep experience reverse engineering embedded and Internet of Things (IoT) systems or cyber-physical devices such as Industrial Control Systems (ICS)
• Expertise with Windows Internals and/or Linux kernel-level programming
• Experience developing, modifying, or enhancing emulation systems such as QEMU to enable advanced vulnerability research techniques
• Experience developing custom emulation, instrumentation, fuzzing, symbolic execution, or dynamic analysis capabilities
• Deep knowledge of multiple processor architectures and operating system environments
• Experience with additional operating systems such as Android, iOS, and macOS
• Advanced knowledge of networking protocols, protocol reverse engineering, and network-based exploitation
• E