Senior DevSecOps Security Control Analyst

Parsons•Columbia, SC

About The Position

Parsons is looking for an amazingly talented Senior Security Control Analyst with a mature understanding of DevSecOps to join our team! In this role you will lead security control assessments for containerized applications, Kubernetes clusters, and multi-cloud architectures against CIS benchmarks, zero trust pipelines, and enterprise guardrails.

Requirements

Minimum of 12 years’ experience with bachelor’s degree or 10 years’ experience with master’s degree
Degree in Computer Science, Cybersecurity, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or University.
Active TS/SCI + CI Polygraph
CISSP or Active DoD IAM and/or IAT Level II/III
AWS Certified Solutions Architect Associate
Demonstrated domain knowledge in DevSecOps, Cloud Architecture, Cybersecurity, and Information Assurance
Exceptional organizational and analytical skills with attention to detail in documentation and reporting

Nice To Haves

Security+
SecurityX

Responsibilities

Lead security control assessments for containerized applications
Create assessment mapping of technical evidence to RMF/NIST SP 800‑53 controls and maintain key authorization artifacts, including SSPs, SARs, and POA&Ms.
Perform hands-on validation using SAST, DAST, and SCA tools to analyze source code, dependencies, and IaC for vulnerabilities.
Apply deep knowledge of cloud security principles including shared responsibility and control inheritance across AWS, Azure, and GCP to design and evaluate secure architectures.
Bring hands‑on expertise with AWS, Azure, GCP, container runtimes such as Podman, and Kubernetes platforms (EKS, AKS, GKE), with proficiency in RBAC, network policies, pod security, secrets management, and supply‑chain security frameworks such as SLSA and Sigstore.
Provide expert guidance on secure design and threat modeling while driving the full vulnerability management lifecycle from triage and risk analysis through remediation validation.
Identify, investigate, and escalate cybersecurity incidents using structured response methodologies that ensure timely containment, effective resolution, and adherence to reporting requirements.
Secure CI/CD pipelines by integrating automated security controls, artifact scanning, integrity checks, and policy-as-code.
Implement and manage security technologies, including monitoring tools, endpoint protection, IAM systems, vulnerability scanners, and threat intelligence platforms to enhance cybersecurity resilience.
Document and communicate technical findings, risk posture, and strategic recommendations to developers, architects, and executive government leadership.