CNO Automation/Testing Engineer, Principal (TS/SCI)

Parsons Corporation is seeking an experienced Software Developer with DevSecOps and docs-as-code experience to support specialized military cyber operations. The role involves conducting offensive and defensive cyber operations, performing software engineering and vulnerability research, and developing automated testing processes to enhance cybersecurity capabilities.

Responsibilities:

• Architect, coordinate and support cyberspace capability development efforts to rapidly deliver joint operational products through integrated project delivery, enabling full-spectrum cyberspace operations
• Perform Software Engineering, analysis and vulnerability research with a focus on OCO (Offensive Cyber Operations) and DCO (Defensive Cyber Operations) activities
• Perform representative capability testing to assess tool functionality and employment considerations prior to operational deployment
• Develop and automate unit, integration, and end-to-end tests, and provide capability testing reports
• Performs test and evaluation of procured and developed cyber capabilities to ensure effective operational evaluation and acceptance for critical operations
• Identifying potential software weaknesses/vulnerabilities
• Conducting thorough static and dynamic analyses of capabilities, including network traffic and PCAP data to identify potential security threats and vulnerabilities
• Research highly technical subject matter, organizes information from multiples sources, and express technical information in written form that is comprehensible to a wide audience of readers
• Automation (docs-as-code), preparation, review, revision, and maintenance of technical documents including software and systems engineering, system operations, testing, and user documentation
• Work with customers directly, performing full cycle system engineering, gathering requirements and source code, to technical documentation and specifications
• Interact with various stakeholders and team members to provide detailed reports and recommendations

Requirements:

• Active TS/SCI
• Bachelor's degree in a related field (Computer Science, Cybersecurity, Computer Engineering, etc.)
• 10+ years of experience; including 5 years utilizing programming/scripting languages such as Python, Bash, PowerShell, Ruby
• Extensive experience in virtual test environment design, to include familiarity configuring and deploying common operating systems and network flows, hypervisors and containers
• Extensive experience in DevSecOps, implementing Linting, testing, docs-as-code and releases via GitLab pipelines
• Ability to effectively assess and automate assessment of software functionality and collect forensic artifacts via custom and industry standard tools on common platforms
• Must be proficient in offensive capability development and assessment for Windows and Linux environments
• Experience working in an agile/scrum environment
• Master's degree in a related field (Computer Science, Cybersecurity, Computer Engineering, etc.)
• 15+ years of experience in cybersecurity analyst, with a strong background in identifying and mitigating vulnerabilities
• Building and designing applications in Python
• Knowledge of Windows and Linux Internals and APIs, Vulnerability Analysis or Kernel / system level programming
• Host-based computer forensics, network-based forensics, intrusion detection/analysis, software vulnerability research, recommending countermeasures and mitigations against potential exploitations of programming language weaknesses and vulnerabilities, cyber red teaming, network penetration testing, security operations center analysis, defensive cyber operations, or offensive cyber operations
• Malware development, analysis, binary disassembly, binary decomplication, network/communication protocol analysis or software exploit development
• Experience researching operating systems and applications to understand strengths and weaknesses in the design and implementation
• Ability to analyze network protocols throughout all layers of the network stack
• Knowledge of analyzing shellcode, packed and obfuscated and the associated algorithms a plus