Cyber Threat Analysts - TS/SCI with Poly Required

Parsons Corporation•Annapolis Junction, MD

2d•$148,300 - $266,900•Onsite

About The Position

Parsons is seeking detail-oriented Cyber Analysts with prior experience in network security and network monitoring. This role provides advanced network protocol analysis and security expertise, involving deep-dive analysis of complex network traffic to assess the capabilities and activities of cyber criminals. The expertise in networks, telecommunications systems, and protocols will be essential in delivering actionable insights to stakeholders to prevent and eradicate threats to critical U.S. systems.

Requirements

Bachelors Degree and at least Seven (7+) years’ experience working in the areas of intelligence, information security, network forensics, insider threat or security operations.
Ability to understand data in various formats to extract and enrich information to enhance its value.
Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards.
Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark
Familiarity writing signatures in Zeek and/or Snort
Strong understanding of common attack vectors and network defense strategies.
Active TS/SCI security clearance with polygraph

Responsibilities

Provide advanced network protocol analysis and security expertise.
Lead deep-dive analysis of complex network traffic to assess the capabilities and activities of cyber criminals.
Deliver actionable insights to stakeholders to prevent and eradicate threats to critical U.S. systems.
Design and implement advanced network monitoring and detection strategies.
Collaborate with development teams and articulate requirements/enhancements for capabilities, tools and strategies.
Document findings and create detailed reports to ensure tradecraft is continually updated.
Present results to technical and non-technical stakeholders.