Senior Vulnerability Researcher - TS/SCI w/Poly

Parsons; Maryland; On-site; USD 148,000 - 267,000; Full time

Benefits offered by this job

Best-in-class benefits (medical,Dental

Vision, PTO, 401(k)

Job summary

Parsons is seeking a Vulnerability Researcher to support U.S. CYBER COMMAND initiatives. You will conduct advanced vulnerability research, reverse engineering, and exploit validation on software, firmware, and hardware systems, translating findings into capabilities for defense missions.

Required TS/SCI with Poly, a technical degree, and 10+ years of experience. Expect travel as needed, a strong benefits package, and a Federal Solutions team focus in a critical national security domain.

Qualifications

• Active TS/SCI with Poly required.
• Bachelor's degree in related technical field and 10+ years of related professional experience; Master's degree and 8+ years.
• Expert proficiency with disassemblers/decompilers (IDA Pro, Ghidra, Binary Ninja).
• Strong understanding of x86/x64/ARM assembly language and processor architectures.
• Practical experience with debuggers (WinDbg, GDB, LLDB) and dynamic analysis tools.
• Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust).
• Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions).
• Proficiency with fuzzing frameworks such as AFL, libFuzzer, Honggfuzz and corpus management.
• Strong scripting skills (Python, Ruby, or similar) for automation and analysis.
• Experience documenting technical research for both technical and operational audiences.

Responsibilities

• Conduct advanced vulnerability research and reverse engineering on target software and hardware systems.
• Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities.
• Reverse engineer software applications, firmware, and hardware components.
• Develop proof-of-concept exploits to validate vulnerability findings and assess operational utility.
• Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces.
• Document vulnerability details, exploitation methodology, and recommended development approaches.
• Provide technical intelligence briefs to capability developers on weaknesses and pathways.
• Collaborate with capability development teams to translate research into tools.
• Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft.
• Conduct limited TDY travel as mission requires.

Skills

Disassemblers/Decompilers

x86/x64/ARM assembly

Debuggers

Dynamic analysis

C/C++/Rust vulnerabilities

Fuzzing frameworks

Scripting (Python/Ruby)

Technical documentation

Education

Bachelor's degree in technical field

Master's degree

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

LLDB

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible.

Job Description:

Parsons is looking for an amazingly talented Vulnerability Researcher to join our team! In this role you will get to support the United States Cyber Command (USCC), where you will have a significant impact on the mission.

What You'll Be Doing:

• Conduct advanced vulnerability research and reverse engineering on target software and hardware systems to identify exploitable weaknesses for cyberspace capability development.
• Perform technical analysis of target platforms, including discovery of zero-day vulnerabilities through fuzzing and code analysis.
• Reverse engineer software applications, firmware, and hardware components using disassemblers, debuggers, and binary analysis tools.
• Develop proof-of-concept exploits to validate vulnerability findings and assess operational utility.
• Analyze target system architectures, protocols, and security mechanisms to identify attack surfaces and weakness patterns.
• Document vulnerability technical details, exploitation methodology, and recommended capability development approaches.
• Provide technical intelligence briefs to capability developers on target system weaknesses and exploitation pathways.
• Collaborate with capability development teams to translate vulnerability research into operational tools.
• Maintain awareness of public vulnerability disclosures, exploit techniques, and adversary tradecraft relevant to target systems.
• Conduct limited TDY travel as mission requires.

What Required Skills You'll Bring:

• Active TS/SCI with Poly
• Bachelor's degree in related technical field and 10+ years of related professional experience; Master's degree and 8+ years.
• Expert proficiency with disassemblers/decompilers (IDA Pro, Ghidra, Binary Ninja)
• Strong understanding of x86/x64/ARM assembly language and processor architectures
• Practical experience with debuggers (WinDbg, GDB, LLDB) and dynamic analysis tools
• Demonstrated capability discovering vulnerabilities in compiled software (C/C++/Rust applications)
• Understanding of common vulnerability classes (memory corruption, logic flaws, race conditions)
• Proficiency with fuzzing frameworks such as AFL, libFuzzer, Honggfuzz and corpus management
• Strong scripting skills (Python, Ruby, or similar) for automation and analysis
• Experience documenting technical research for both technical and operational audiences

What Desired Skills You'll Bring:

• Experience with Windows kernel/driver reverse engineering
• Firmware analysis and embedded systems reverse engineering
• Network protocol analysis and vulnerability research
• Experience with UEFI/BIOS or bootloader security analysis
• Published vulnerability research (CVEs, conference presentations, blog posts)
• Familiarity with symbolic execution and taint analysis tools
• Understanding of offensive cyberspace operations workflows

An active Top Secret SCI w/Polygraph security clearance is required for this position.

This position is part of our Federal Solutions team.

The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what's next to deliver the solutions our customers need now.

Salary Range: $148,300.00 - $266,900.00

We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!

Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.