Poly Required

Parsons Corporation•Annapolis Junction, MD

1d•$134,100 - $241,400

About The Position

Parsons is looking for a Cyber Vulnerability Analyst - Penetration Tester with a background in Red Team/Penetration Testing to join our team. In this role you will be responsible for simulating adversary tactics and working with other threat analyst team members to inform the proactive identification of cyber threats with the goal to prevent and eradicate threats to critical U.S. systems. You will work as part of a team that analyzes disparate data sets to discover and inform cyber operations. This role requires a firm understanding of offensive cyber strategies, adversarial attack methodologies, and defensive strategies. This position is part of our Federal Solutions team. The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now. Founded in 1944, Parsons Corporation, a digitally enabled solutions provider, is focused on creating the future of the defense, intelligence, and critical infrastructure markets. From Earth to outer space, we deliver tomorrow’s solutions today. Equipped with the capabilities required to take on any defense, intelligence, or critical infrastructure challenge, our agile, innovative, and disruptive approach enables us to deliver solutions at the speed of relevance. Our people are our greatest asset. We strive to be an employer of choice that engages employees in the community and creates rewarding career paths to cultivate a resilient workforce that is ready for the future.

Requirements

Must have a Bachelor’s Degree
Minimum of Seven (7+) years’ experience working in the areas of intelligence, information security, network forensics, insider threat or security operations
Deep understanding of adversary tactics, techniques, and procedures (TTPs) and ability to identify system vulnerabilities
Ability to analyze and correlate threat data from multiple sources
Excellent written and verbal communication skills for both technical and non-technical audiences
Ability to understand data in various formats to extract and enrich information to enhance its value
Experience with XKS creating general queries, fingerprinting, and identifying atypical events
Understanding of TCP/IP communication protocols and packet flows based on IP traffic
Familiarity writing signatures in Zeek and/or Snort
Active TS/SCI security clearance with polygraph required
An active Top Secret SCI w/Polygraph security clearance is required for this position

Nice To Haves

Relevant certifications (e.g., GCTI, OSCP, GIAC, CEH, CRT)

Responsibilities

Simulating adversary tactics
Working with other threat analyst team members to inform the proactive identification of cyber threats with the goal to prevent and eradicate threats to critical U.S. systems
Analyzing disparate data sets to discover and inform cyber operations
Communicating defensive recommendations to other analysts
Working with development teams and articulate requirements/enhancements to secure capabilities and tools
Performing log file analysis including creating threat intelligence reports that indicate findings, mitigations, and confidence
Fanning advanced analytics, network diagrams, and other forms of associated knowledge to further understand systems, networks, environments, and adversaries
Working with IC mission cybersecurity analysts on understanding the adversary and developing mission specific TTPs
Documenting findings, creating detailed reports, and presenting results to technical and non-technical stakeholders
Understanding data in various formats to extract and enrich information to enhance its value
Creating general queries, fingerprinting, and identifying atypical events using XKS
Analysis of Packet Capture (PCAP) traffic in Wireshark
Writing signatures in Zeek and/or Snort