Intrusion Analysis Technical Lead

Parsons Corporation•Linthicum, MD

2d•$125,100 - $225,200

About The Position

Parsons is looking for an experienced Intrusion Analysis Technical Lead to help guide a team of cyber analysts performing high-impact investigations in support of critical mission objectives. This role offers the opportunity to combine deep technical analysis skills with leadership, mentorship, and continuous improvement in an environment where technical excellence and mission success go hand in hand. In this role, you will serve as a technical leader for analysts performing advanced cyber analysis, including host-based and network-based forensic analysis, malware analysis, and reverse engineering. You will help guide the team’s technical approach, support complex investigations, and ensure high-quality analysis that enables our customer to better understand, detect, and respond to sophisticated cyber threats. Your expertise will be instrumental in maintaining technical rigor, improving analytic workflows, and adapting the team’s methods as new technologies and threats emerge. This position is ideal for someone who enjoys staying close to the technical work while also helping others succeed. You will collaborate closely with a highly skilled team of analysts, providing technical direction, mentorship, and day-to-day support to strengthen team performance and help individuals grow in their careers. You’ll play a key role in elevating analytic quality, sharing best practices, and fostering a culture of technical excellence across the team. You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team.

Requirements

Active TS/SCI clearance
GCIH or equivalent cybersecurity certification
Bachelors degree with 8+ years experience
At least 5 years of recent experience leading technical efforts and supervising teams in a digital forensics laboratory environment
At least 7 years of experience performing digital and multimedia (D/MM) forensics examinations, analysis, and techniques
Experience within the last 7 years working with MS Windows, Apple/UNIX, and Linux operating systems related to forensics examinations
Experience within the last 7 years with forensic network analysis in support of the investigative process
Experience within the last 7 years analyzing endpoint, Packet Capture (PCAP) data, and other relevant data sources
Experience within the last 5 years utilizing common digital forensic examination tools, including FTK, EnCase, and X-Ways
Demonstrated experience with both network-based and host-based forensics, malware analysis, and/or reverse engineering
Strong understanding of cyber intrusion analysis, adversary behavior, and investigative tradecraft
Ability to provide technical leadership and mentorship within a team environment
Strong written and verbal communication skills

Nice To Haves

Experience supporting Government or national security cybersecurity missions
Experience correlating data across host, network, malware, and forensic sources
Familiarity with advanced threat activity, including persistent or sophisticated intrusion techniques
Proven ability to improve analytic workflows, technical quality, and team effectiveness
Passion for mentoring analysts and helping technical teams grow

Responsibilities

Serve as the technical lead for a team performing advanced intrusion analysis in support of customer mission objectives
Guide investigations involving host-based and network-based forensic analysis
Support and perform malware analysis and reverse engineering to better understand adversary behavior and malicious code
Help the team identify, analyze, and correlate indicators across multiple data sources to assess cyber threats and intrusion activity
Provide technical mentorship, guidance, and support to analysts working complex investigations
Promote analytic rigor, sound investigative methodology, and cybersecurity best practices
Help improve workflows, tools, and techniques as new technologies and mission needs evolve
Collaborate with internal stakeholders and technical teammates to ensure high-quality, mission-relevant analysis
Contribute to technical reporting and communication of findings to support customer decision-making