Vulnerability Disclosure Analyst - Senior

Parsons Corporation•Minneapolis, MN

2d•$112,200 - $196,400

About The Position

Parsons is seeking a senior Cyber Vulnerability Intake and Triage Analyst to support mission-critical vulnerability disclosure and cybersecurity operations. The role manages vulnerability reports from initial receipt through validation, prioritization, disposition, remediation tracking, and closure. The analyst evaluates technical reports, coordinates with researchers and system owners, documents findings, and maintains accurate vulnerability information in enterprise tracking systems. The position is part of Parsons’ Federal Solutions team, which supports U.S. government missions.

Requirements

Bachelor’s degree and 10 or more years of relevant experience.
Current, active TS/SCI clearance; an active Top Secret SCI security clearance is required.
Experience in cybersecurity operations, vulnerability management, security assessment, or incident analysis.
Understanding of vulnerability assessment and validation processes.
Ability to evaluate technical impact and exploitability.
Experience documenting findings in ticketing, case-management, or vulnerability-management systems.
Strong written and verbal communication skills.
Ability to manage multiple reports and competing priorities.
Strong analytical and problem-solving skills.
Ability to work effectively in a collaborative, mission-focused environment.

Nice To Haves

Experience supporting DoD, Federal Government, intelligence community, or defense industrial base cybersecurity programs.
Knowledge of CVE, CVSS, CWE, vulnerability disclosure, and coordinated vulnerability disclosure practices.
Familiarity with vulnerability scanners and application or infrastructure testing tools.
Experience with ServiceNow, Jira, Archer, eMASS, or comparable tracking systems.
Security+, CySA+, CEH, CISSP, or comparable cybersecurity certification.
Experience with technical report writing and customer-facing communications.
Familiarity with RMF, STIGs, security controls, and vulnerability remediation processes.

Responsibilities

Receive and manage vulnerability reports submitted through Department of War (DoW) and Defense Industrial Base vulnerability disclosure programs.
Maintain designated vulnerability-reporting intake channels.
Log incoming reports into a centralized tracking system within required timeframes.
Review reports for completeness, scope, impact, and exploitability.
Assign vulnerability priority using an established impact-and-exploitability matrix.
Conduct or coordinate technical validation using vulnerability scanners, manual testing, and other appropriate tools.
Identify reports requiring clarification or additional technical information, and communicate deficiencies and information needs to researchers.
Recommend report dispositions, including closure, further investigation, referral, or informational status.
Document analysis, rationale, communications, and status updates in the vulnerability tracking system.
Coordinate remediation plans and risk acceptance with system owners.
Track approved Plans of Action and Milestones and support final report closure.
Collaborate with vulnerability analysts, system owners, researchers, and Government stakeholders.