Parallels Inc, a long-standing provider of VDI and EUC solutions, seeks an Application Security Engineer for a remote role focused on vulnerability coordination, exploit development, and secure development practices across Parallels' core applications. You will help drive the remediation of vulnerabilities, assist with CVE disclosures, and proactively uncover new weaknesses to strengthen the security posture of Parallels Remote Application Server and related products.
Salary: USD 120,000 - 130,000 per year. This is a remote position.
Responsibilities
- Reproduce and triage incoming vulnerabilities from security automation and bug bounty programs, then propose granular fixes to engineers
- Discover vulnerabilities and construct exploits for core Parallels applications such as Parallels Remote Application Server
- Assist in the CVE disclosure process
- Provide threat models and design reviews for teams throughout the company
- Assist in tuning existing static analysis, dynamic analysis, and dependency management tools
Requirements
- An attacker mindset: engineers will often want proof before fixes are implemented
- Eagerness to learn – you are not expected to know everything coming in, but you should continuously learn new techniques on the job
- The ability to communicate clearly, acknowledge mistakes, and disagree when necessary
- Demonstrable passion for offensive security
- Experience reading, writing and debugging C++ and Python code
- Basic experience with memory exploitation techniques
- Demonstrable experience with web exploitation techniques and tools (e.g. PortSwigger lab scoreboards)
- Excellent written and oral communication skills
- BSc/MS in computer science or a related field
- Previous CVEs in desktop applications
- Proficiency with reverse engineering tools
- Significant experience in memory exploitation techniques (e.g. gaining code execution from memory vulnerabilities in modern operating systems)
- Familiarity with cloud security best practices
- 3+ years of industry experience
- OSCP/OSWE/OSED/RET2 certification
Technologies
- C++, Python, PortSwigger lab scoreboards
About Parallels
Parallels offers leading VDI and EUC solutions for businesses, supporting desktop and cloud workloads in on-premises or hybrid environments since 1999, with a focus on speed, security, and affordability for today’s work ecosystems.
Parallels maintains an equal employment opportunity policy, welcoming qualified applicants without regard to race, color, age, religion, national origin, sex, political affiliation, sexual orientation, marital status, disability, veteran status, genetics, or any other protected characteristic.
The company is committed to an inclusive, barrier-free recruitment and work environment. If accommodations are required during hiring or employment, please inform us so appropriate arrangements can be made as required by law.
