Senior Offensive Cybersecurity Engineer

Parry Labs, LLC is seeking a Senior Offensive Cybersecurity Engineer to lead authorized offensive security assessments across software, network interfaces, and distributed mission systems. The role focuses on identifying vulnerabilities, demonstrating impact in controlled environments, and verifying remediation while maintaining clear boundaries between assessment signoff and implementation ownership.

Onsite Location

Cedar Rapids, IA (onsite)

Target Start

February/March 2027

Role Focus

You will lead authorized offensive security assessments of software, network interfaces, and distributed mission systems. Work includes vulnerability identification, impact demonstration, and verification that fixes address the reported issues. You will also develop threat models and security test plans, conduct penetration testing and fuzzing, and support red-team/blue-team activities.

Responsibilities

• Develop threat models and security test plans tied to system requirements and potential failure modes.
• Define authorized test scope, rules of engagement, and stop conditions with program stakeholders.
• Conduct penetration testing, protocol analysis, and vulnerability research within approved test environments.
• Build protocol and parser fuzzing tools to support testing activities.
• Add repeatable security checks to automated test workflows.
• Assess Linux services and network interfaces.
• Review Rust or C/C++ code for security weaknesses.
• Evaluate authentication, digital signatures, replay protection, and key handling with software and cryptographic engineers.
• Document reproducible findings, impact, and remediation priorities.
• Retest fixes and preserve test evidence.
• Support red-team and blue-team exercises.
• Keep assessment signoff separate from implementation ownership.

Education and Experience

• Bachelor’s degree in cybersecurity, computer science, engineering, or a related field (or equivalent relevant experience).
• 7+ years of security engineering experience, including hands-on offensive testing or vulnerability research.

Requirements

• Experience with authorized penetration testing, protocol analysis, fuzzing, and vulnerability assessment.
• Ability to review Rust or C/C++ and develop security test tooling in Python or a systems language.
• Experience analyzing Linux and network behavior, including TCP/IP, service configuration, and access controls.
• Experience producing reproducible findings, explaining security impact, and verifying remediation with engineering teams.
• U.S. citizenship and eligibility to obtain and maintain a U.S. government security clearance if required. An active clearance is not required at hire.

Technologies

Rust, C/C++, Python, Linux, TCP/IP

Benefits

• Workplace flexibility
• Commitment to the health and well-being of you and your family
• Opportunities to work with a purpose
• Education assistance
• Unlimited paid time off

Preferred Qualifications

• Experience testing positioning, navigation, and timing (PNT), distributed systems, or embedded devices.
• Knowledge of applied cryptography, post-quantum algorithms, hardware security modules, or key management.
• Experience with source-code security reviews, secure implementation practices, or side-channel analysis.
• Experience with DoD security testing, STIG verification, or Risk Management Framework assessment evidence.

Accessibility and Accommodations

If you need a reasonable accommodation for any part of the employment process due to a medical condition or disability, contact HR at [email protected] or call (256) 682-7145 and include the nature of your request and your contact information.