Work with purpose in an onsite role in Cedar Rapids, IA, while enjoying workplace flexibility, unlimited paid time off, and a team culture that supports the health and well-being of you and your family. Parry Labs, LLC also offers education assistance and opportunities to apply offensive security skills to mission-relevant systems.
What You’ll Do
You will lead authorized offensive security assessments across software, network interfaces, and distributed mission systems. Your work will include identifying vulnerabilities, demonstrating impact, and collaborating with engineers to verify remediation. You will also develop threat models and security test plans, perform penetration testing and fuzzing, and support red-team/blue-team exercises.
You will report to a functional engineering manager with technical direction from the Chief Engineer. The target start is February/March 2027.
Responsibilities
- Develop threat models and security test plans aligned to system requirements and potential failure modes.
- Define authorized test scope, rules of engagement, and stop conditions with program stakeholders.
- Conduct penetration testing, protocol analysis, and vulnerability research within approved test environments.
- Build protocol and parser fuzzing tools.
- Add repeatable security checks to automated test workflows.
- Assess Linux services and network interfaces.
- Review Rust or C/C++ code for security weaknesses.
- Evaluate authentication, digital signatures, replay protection, and key handling with software and cryptographic engineers.
- Document findings with impact and remediation priorities.
- Retest fixes and preserve test evidence.
- Support red-team and blue-team exercises.
- Maintain assessment signoff separately from implementation ownership.
Requirements
- Bachelor’s degree in cybersecurity, computer science, engineering, or a related field, or equivalent relevant experience.
- 7+ years of security engineering experience, including hands-on offensive testing or vulnerability research.
- Experience with authorized penetration testing, protocol analysis, fuzzing, and vulnerability assessment.
- Ability to review Rust or C/C++ and develop security test tooling in Python or a systems language.
- Experience analyzing Linux and network behavior, including TCP/IP, service configuration, and access controls.
- Ability to produce reproducible findings, explain security impact, and verify remediation with engineering teams.
- U.S. citizenship and eligibility to obtain and maintain a U.S. government security clearance if required. An active clearance is not required at hire.
Preferred Qualifications
- Experience testing positioning, navigation and timing (PNT), distributed systems, or embedded devices.
- Knowledge of applied cryptography, post-quantum algorithms, hardware security modules, or key management.
- Experience with source-code security reviews, secure implementation practices, or side-channel analysis.
- Experience with DoD security testing, STIG verification, or Risk Management Framework assessment evidence.
Technologies
- Rust
- C/C++
- Python
- Linux
- TCP/IP
Accessibility / Accommodations
If you need a reasonable accommodation due to a medical condition or disability for any part of the employment process, contact HR@parrylabs.com or call (256) 682-7145 with the nature of your request and your contact information.
