Senior Vulnerability Researcher Engineer (TS)

Parsons; Melbourne (FL); On-site; USD 140,000 - 190,000; Full time

Job summary

Parsons is seeking a Senior Vulnerability Research Engineer to support advanced R&D contracts for the U.S. Government.

You will work on a small, highly technical team performing vulnerability research, reverse engineering, and exploit development across hardware, firmware, and software targets. The role is based onsite at the Cromulence-Parsons office in Melbourne, Florida, on Florida's Space Coast, with work in both classified and unclassified environments.

Qualifications

• Bachelor's degree in a related technical field.
• 8+ years of professional related experience; Master’s may substitute for 4 years.

Responsibilities

• Perform vulnerability research and reverse engineering on embedded systems.
• Analyze software, firmware, binaries, protocols, and system behavior for exploitable vulnerabilities.
• Develop, test, and integrate cyber tools and exploits.
• Document findings and collaborate with researchers and stakeholders.
• Mentor junior researchers and guide technical approaches.

Skills

C/C++

Python

Reverse engineering

Vulnerability research

Exploit development

Networking fundamentals

Operating system fundamentals

Problem solving

Education

Bachelor's degree in a related technical field

Master's degree considered in lieu of 4 years' experience

Tools

Ghidra

IDA Pro

Binary Ninja

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible.

Job Description:

Parsons is seeking a Senior Vulnerability Research Engineer to join our team in support of advanced research and development contracts for the U.S. Government. You'll work on a small, highly technical team performing vulnerability research and reverse engineering against complex embedded and cyber-physical systems. The role involves taking research from initial target analysis through vulnerability discovery, exploit development, and integration into operational cyber capabilities.

As a Senior Vulnerability Research Engineer, you'll serve as an experienced hands-on technical contributor while helping guide less experienced researchers through complex technical challenges. You'll have the opportunity to work across the full vulnerability research lifecycle, develop new tools and techniques, and contribute to technically challenging research efforts involving software, firmware, hardware, and communications interfaces.

This is an onsite position based at the Cromulence-Parsons office in the historic downtown of Melbourne, Florida , on Florida's Space Coast. Work will be performed in both classified and unclassified environments.

What You'll Be Doing:

• Perform vulnerability research / reverse engineering (VR/RE) against a variety of embedded systems, including both hardware and software targets
• Analyze software, firmware, binaries, protocols, and system behavior to identify exploitable vulnerabilities
• Develop, test, debug, and integrate cyber tools such as exploits, cyber effects, and supporting research capabilities
• Apply static and dynamic analysis techniques using disassemblers, decompilers, debuggers, emulators, instrumentation, and custom tooling
• Analyze and bypass modern exploit mitigations and platform-specific security protections
• Develop scripts, utilities, harnesses, and automation to improve vulnerability discovery, analysis, and exploit development workflows
• Contribute to the development of emulation, instrumentation, fuzzing, and other advanced vulnerability research capabilities
• Independently execute significant portions of complex vulnerability research efforts while collaborating with other researchers on larger technical objectives
• Serve as a senior technical contributor and mentor, providing technical direction to junior researchers while remaining hands-on with vulnerability research and exploit development
• Review technical approaches, research results, exploit implementations, and supporting software developed by other team members
• Document technical findings, research methodologies, vulnerabilities, and developed capabilities for internal and customer-facing use
• Collaborate with customers and technical stakeholders to understand target systems, research objectives, and technical constraints

What Qualifications You'll Bring :

• U.S. Citizenship is required
• Bachelor's degree in a related technical field and 8+ years of professional related experience; Master's degree in a related field will be considered in lieu of 4 years' experience
• 5+ years of hands-on experience in vulnerability research, reverse engineering, exploit development, and/or cyber tool development
• Strong programming experience in languages such as C, C++, and Python
• Extensive experience with a decompiler/disassembler such as Ghidra (highly preferred), IDA Pro, or Binary Ninja
• Expertise analyzing at least one instruction set architecture, such as x86/x86-64, ARM/AArch64, or MIPS
• Experience using debuggers and other dynamic analysis tools to analyze complex software behavior
• Experience with modern exploitation techniques, tools, and methodologies
• Experience analyzing and bypassing modern exploit mitigations such as DEP/NX, ASLR, stack protections, CFI, and platform-specific protections
• Strong understanding of operating system fundamentals, memory management, processes, threads, and low-level software behavior
• Strong understanding of networking fundamentals and common network protocols
• Demonstrated ability to independently investigate complex technical problems and develop practical solutions
• Ability to communicate technical concepts, research findings, and implementation details to both researchers and technical stakeholders

What Desired Skills You'll Bring :

• 10+ years of experience in vulnerability research, reverse engineering, exploit development, and/or cyber tool development
• Experience reverse engineering embedded and Internet of Things (IoT) systems or cyber-physical devices such as Industrial Control Systems (ICS)
• Experience analyzing firmware, bootloaders, device drivers, kernels, and other low-lev