Cyber Threat Analyst

Parsons Corporation•Annapolis Junction, MD

1d•$112,200 - $196,400

About The Position

Parsons is seeking a Cyber Threat Intel Analyst to provide advanced network protocol analysis and security expertise. The role leads deep-dive analysis of complex network traffic to assess the capabilities and activities of cyber criminals. Expertise in networks, telecommunications systems, and protocols is used to deliver actionable insights to stakeholders working to prevent and eradicate threats to critical U.S. systems. The position is part of Parsons’ Federal Solutions team, which delivers resources and services to U.S. government customers across defense, security, intelligence, infrastructure, and environmental missions.

Requirements

Active Top Secret SCI security clearance with polygraph.
Bachelor’s degree; additional years of experience may count in lieu of a degree.
At least 8 years of experience; additional education and certifications may count toward total years of experience.
Ability to understand data in various formats and extract and enrich information.
Experience with Elastic, Splunk, or another SIEM, including creating visualizations and dashboards.
Understanding of TCP/IP communication protocols and packet flows based on IP traffic, and experience analyzing PCAP traffic in Wireshark.
Familiarity with writing signatures in Zeek and/or Snort.
Strong understanding of common attack vectors and network defense strategies.
Ability to document findings and create detailed reports, and present results to technical and non-technical stakeholders.

Responsibilities

Lead deep-dive analysis of complex network traffic to assess cybercriminal capabilities and activities.
Understand data in various formats, extracting and enriching information to enhance its value.
Create visualizations and dashboards using Elastic, Splunk, or other SIEM tools.
Analyze TCP/IP communication protocols and packet flows based on IP traffic, including PCAP traffic in Wireshark.
Write signatures in Zeek and/or Snort.
Design and implement advanced network monitoring and detection strategies.
Collaborate with development teams and articulate requirements and enhancements for capabilities, tools, and strategies.
Document findings, create detailed reports to keep tradecraft updated, and present results to technical and non-technical stakeholders.