Cyber Threat Analyst

Parsons Corporation•Annapolis Junction, MD

1d•$134,100 - $241,400

About The Position

Parsons is seeking a Cyber Analyst to join its growing Federal Solutions team. The role is suited to candidates with prior analytic experience in network security and network monitoring. The analyst will provide advanced network protocol analysis and security expertise, lead deep-dive analysis of complex network traffic, and assess the capabilities and activities of cyber criminals. Expertise in networks, telecommunications systems, and protocols will support the delivery of actionable insights to stakeholders working to prevent and eradicate threats to critical U.S. systems.

Requirements

Active Top Secret SCI security clearance with polygraph.
Bachelor's degree; additional years of experience may count in lieu of a degree.
10 or more years of experience; additional education, training, and certifications may count toward total years of experience.
Ability to understand data in various formats and extract and enrich information to enhance its value.
Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
Experience with Elastic, Splunk, or another Security Information and Event Management (SIEM) tool, creating visualizations and dashboards.
Understanding of TCP/IP communication protocols and packet flows based on IP traffic, and analysis of Packet Capture (PCAP) traffic in Wireshark.
Familiarity with writing signatures in Zeek and/or Snort.
Strong understanding of common attack vectors and network defense strategies.

Responsibilities

Lead deep-dive analysis of complex network traffic to assess the capabilities and activities of cyber criminals.
Understand data in various formats and extract and enrich information to enhance its value.
Create general queries in XKS, fingerprint activity, and identify atypical events.
Create visualizations and dashboards using Elastic, Splunk, or other SIEM tools.
Analyze TCP/IP communication protocols and packet flows based on IP traffic, including PCAP traffic in Wireshark.
Write signatures in Zeek and/or Snort.
Design and implement advanced network monitoring and detection strategies.
Collaborate with development teams and articulate requirements and enhancements for capabilities, tools, and strategies.
Document findings and create detailed reports to ensure tradecraft is continually updated.
Present results to technical and non-technical stakeholders.