Cybersecurity Lead
for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use - for any list of duties/requirements/benefits, and
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Remove boilerplate, navigation, legal, EEO, equal-opportunity, scam-warning, duplicated lines, application instructions. Include a section ONLY when posting has real, specific content for it — never emit heading with filler/placeholder text. Prefer few substantive sections over many thin ones.
We need to parse the posting and extract sections.
The posting includes:
- Intro paragraph: "In a world of possibilities..." etc. That's about the company, maybe "About the role"? Actually "About the role" could be the description of the job. We'll treat that as "About the role" section.
- Then "Job Description" heading (but we ignore headings). The content after that: description of role, responsibilities, etc.
- Then "What You'll Be Doing" list of duties.
- Then "What Required Skills You'll Bring" list.
- Then "What Desired Skills You'll Bring" list.
- Then "Security Clearance Requirement" paragraph.
- Then "This position is part of our Federal Solutions team." paragraph.
- Then "Salary Range: $148,300.00 - $266,900.00"
- Then benefits paragraph: "We value our employees..." includes benefits list.
- Then EEO boilerplate (remove).
- Then fraud warning (remove).
- Then "Imagine next and join..." (call to action) remove.
We need to produce sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We need to decide which content goes where.
- About the role: likely the introductory paragraph(s) describing the role and mission. Could be the first paragraph after intro: "Parsons is seeking an experienced Cybersecurity Lead to lead a high-performing defensive cyber operations team supporting a large-scale Government cybersecurity program. This is an opportunity to shape and grow an integrated cybersecurity capability responsible for identifying vulnerabilities, detecting advanced threats, responding to incidents, maintaining compliance, and protecting mission-critical systems and networks. As the Cybersecurity Lead, you will provide technical and operational leadership for a team performing penetration testing, vulnerability assessments, threat hunting, incident response, security monitoring, vulnerability and configuration management, and Security Operations Center support. You will help establish the team’s structure, processes, priorities, and operating rhythm while ensuring cybersecurity services are delivered effectively and in accordance with Government requirements. You will serve as both a team leader and a senior cybersecurity subject matter expert. Working closely with Government stakeholders, Parsons program leadership, and technical teams across the enterprise, you will assess risk, guide defensive operations, develop actionable recommendations, and help strengthen the customer’s security posture. You will also have access to the expertise, tools, and best practices of Parsons’ Cybersecurity Center of Excellence. The ideal candidate is a mission-focused cybersecurity professional who can lead technical teams, make sound risk-based decisions, communicate effectively with senior stakeholders, and remain hands-on when complex cybersecurity challenges arise. You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team."
That is a lot; could be split into About the role and Responsibilities. But we need to avoid thin sections. Perhaps combine About the role and Responsibilities into one? But we have separate headings allowed. We need to include a section only if there is real specific content. We have content for About the role (intro), Responsibilities (What You'll Be Doing list), Requirements (clearance, experience, certifications), Qualifications (maybe desired skills?), Skills (maybe required and desired skills combined?), Benefits, Pay, Schedule (none). There's no schedule info, so we should not create Schedule section.
We need to decide mapping:
- About the role: introductory paragraph(s) describing the role and team.
- Responsibilities: the "What You'll Be Doing" list (the bullet list of duties). Could also include some of the earlier description but we can keep responsibilities as that list.
- Requirements: mandatory items: TS/SCI clearance active/current, 11+ years experience, CISSP certification or equivalent, at least one year experience leading team. Also maybe "Security Clearance Requirement" paragraph.
- Qualifications: maybe the "What Desired Skills You'll Bring" list? Or we could treat desired skills as Qualifications. But we also have Skills section for required/desired skills? The instruction says use headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to allocate content accordingly.
We could map:
- Requirements: mandatory qualifications (clearance, years, cert, leadership experience).
- Qualifications: desired qualifications (desired skills list). Or maybe Qualifications is for education/degrees? Not present. Could combine desired skills into Skills.
- Skills: maybe both required and desired skills? But we already used Requirements for mandatory experience/cert. Could put required skills (like penetration testing, vuln assessment, etc.) under Skills. However the posting lists "Demonstrated experience in at least several of the following areas:" which is a list of skill areas. That could be Skills.
Thus:
- Requirements: clearance, 11+ years, CISSP, 1 year leadership.
- Skills: the list of areas (penetration testing, vulnerability assessment and management, threat hunting, incident response, security monitoring and event analysis, SOC operations, security control assessment, RMF and ATO support, configuration and patch management, cybersecurity compliance, experience developing reports, policies, procedures, playbooks, experience communicating risks to technical and nontechnical stakeholders, strong leadership, analytical, problem-solving, written, verbal communication skills). That is a mix of required and desired? Actually that list is under "Demonstrated experience in at least several of the following areas:" under Required Skills. So it's required skill areas.
- Qualifications: desired skills list (the "What Desired Skills You'll Bring").
- Benefits: paragraph about benefits.
- Pay: salary range.
- Schedule: none -> omit.
- About the role: introductory paragraph(s) before responsibilities.
- Responsibilities: the "What You'll Be Doing" list.
We need to ensure we don't repeat content. Let's extract.
Introductory paragraphs: The first paragraph after the imaginative tagline: "Parsons is seeking an experienced Cybersecurity Lead to lead a high-performing defensive cyber operations team supporting a large-scale Government cybersecurity program. This is an opportunity to shape and grow an integrated cybersecurity capability responsible for identifying vulnerabilities, detecting advanced threats, responding to incidents, maintaining compliance, and protecting mission-critical systems and networks. As the Cybersecurity Lead, you will provide technical and operational leadership for a team performing penetration testing, vulnerability assessments, threat hunting, incident response, security monitoring, vulnerability and configuration management, and Security Operations Center support. You will help establish the team’s structure, processes, priorities, and operating rhythm while ensuring cybersecurity services are delivered effectively and in accordance with Government requirements. You will serve as both a team leader and a senior cybersecurity subject matter expert. Working closely with Government stakeholders, Parsons program leadership, and technical teams across the enterprise, you will assess risk, guide defensive operations, develop actionable recommendations, and help strengthen the customer’s security posture. You will also have access to the expertise, tools, and best practices of Parsons’ Cybersecurity Center of Excellence. The ideal candidate is a mission-focused cybersecurity professional who can lead technical teams, make sound risk-based decisions, communicate effectively with senior stakeholders, and remain hands-on when complex cybersecurity challenges arise. You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team."
That is a big block. Could be considered About the role.
Now Responsibilities: The "What You'll Be Doing" list:
- Lead, organize, mentor, and support a team of cybersecurity professionals conducting defensive cyber operations.
- Oversee penetration testing and security assessments designed to identify weaknesses in networks, applications, systems, and operational technology environments.
- Direct vulnerability assessment activities, including recurring vulnerability scans, analysis of findings, risk prioritization, reporting, and remediation tracking.
- Lead proactive threat-hunting activities to identify hidden, persistent, or advanced threats across IT and OT environments.
- Oversee continuous monitoring and investigation of anomalous activity and potential security incidents.
- Direct incident response activities, including detection, analysis, containment, eradication, recovery, escalation, and lessons learned.
- Support the operation of a centralized Security Operations Center capability responsible for coordinating defensive security activities.
- Coordinate security event analysis, trend analysis, alert investigation, and response activities across cybersecurity and IT operations teams.
- Develop, maintain, and improve cybersecurity policies, procedures, playbooks, SOPs, and incident response processes.
- Ensure cybersecurity findings and incidents are accurately documented, classified, escalated, and reported within required timelines.
- Oversee the development and maintenance of Authority to Operate and Assess-Only authorization packages.
- Support Risk Management Framework activities by coordinating technical evidence, security documentation, continuous monitoring data, and compliance artifacts.
- Manage applicable cybersecurity orders, taskers, directives, and remediation requirements.
- Oversee the development and tracking of Plans of Action and Milestones when requirements cannot be fully satisfied within the prescribed timeframe.
- Lead vulnerability and configuration management activities, including secure configuration, patching, STIG compliance, and attack-surface reduction.
- Promote Infrastructure as Code and Configuration as Code practices that support controlled, auditable, and security-reviewed changes.
- Coordinate with infrastructure, cloud, DevSecOps, application, data, and operations teams to address cybersecurity risks.
- Evaluate emerging cybersecurity technologies, tools, and practices and provide recommendations based on mission value, risk, cost, and implementation requirements.
- Develop cybersecurity reports, briefings, metrics, risk assessments, and recommendations for Government and program leadership.
- Track operational performance, staffing requirements, service quality, and team workload.
- Identify cybersecurity risks, resource limitations, process gaps, and opportunities for continuous improvement.
- Support transition-in, transition-out, surge staffing, training, and continuity of operations activities.
- Ensure all work is performed in accordance with applicable Government cybersecurity requirements, Government-approved policies, contract requirements, and security procedures.
That's a long list; we will put as
- items.
Now Requirements: Mandatory:
- TS/SCI clearance active/current
- Eleven or more years of experience in cybersecurity, cyber operations, information assurance, information security, or a related field.
- CISSP certification or an equivalent industry-recognized cybersecurity certification.
- At least one year of experience leading, supervising, mentoring, or coordinating a cybersecurity, SOC, incident response, vulnerability management, or related technical team.
Also maybe "Security Clearance Requirement: An active Top Secret SCI security clearance is required for this position." That's duplicate; we can include just once.
Now Skills: The list under "Demonstrated experience in at least several of the following areas:":
- Penetration testing
- Vulnerability assessment and management
- Threat hunting
- Incident response
- Security monitoring and event analysis
- Security Operations Center operations
- Security control assessment
- RMF and ATO support
- Configuration and patch management
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Remove boilerplate, navigation, legal, EEO, equal-opportunity, scam-warning, duplicated lines, application instructions. Include a section ONLY when posting has real, specific content for it — never emit heading with filler/placeholder text. Prefer few substantive sections over many thin ones. We need to parse the posting and extract sections. The posting includes: - Intro paragraph: "In a world of possibilities..." etc. That's about the company, maybe "About the role"? Actually "About the role" could be the description of the job. We'll treat that as "About the role" section. - Then "Job Description" heading (but we ignore headings). The content after that: description of role, responsibilities, etc. - Then "What You'll Be Doing" list of duties. - Then "What Required Skills You'll Bring" list. - Then "What Desired Skills You'll Bring" list. - Then "Security Clearance Requirement" paragraph. - Then "This position is part of our Federal Solutions team." paragraph. - Then "Salary Range: $148,300.00 - $266,900.00" - Then benefits paragraph: "We value our employees..." includes benefits list. - Then EEO boilerplate (remove). - Then fraud warning (remove). - Then "Imagine next and join..." (call to action) remove. We need to produce sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide which content goes where. - About the role: likely the introductory paragraph(s) describing the role and mission. Could be the first paragraph after intro: "Parsons is seeking an experienced Cybersecurity Lead to lead a high-performing defensive cyber operations team supporting a large-scale Government cybersecurity program. This is an opportunity to shape and grow an integrated cybersecurity capability responsible for identifying vulnerabilities, detecting advanced threats, responding to incidents, maintaining compliance, and protecting mission-critical systems and networks. As the Cybersecurity Lead, you will provide technical and operational leadership for a team performing penetration testing, vulnerability assessments, threat hunting, incident response, security monitoring, vulnerability and configuration management, and Security Operations Center support. You will help establish the team’s structure, processes, priorities, and operating rhythm while ensuring cybersecurity services are delivered effectively and in accordance with Government requirements. You will serve as both a team leader and a senior cybersecurity subject matter expert. Working closely with Government stakeholders, Parsons program leadership, and technical teams across the enterprise, you will assess risk, guide defensive operations, develop actionable recommendations, and help strengthen the customer’s security posture. You will also have access to the expertise, tools, and best practices of Parsons’ Cybersecurity Center of Excellence. The ideal candidate is a mission-focused cybersecurity professional who can lead technical teams, make sound risk-based decisions, communicate effectively with senior stakeholders, and remain hands-on when complex cybersecurity challenges arise. You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team." That is a lot; could be split into About the role and Responsibilities. But we need to avoid thin sections. Perhaps combine About the role and Responsibilities into one? But we have separate headings allowed. We need to include a section only if there is real specific content. We have content for About the role (intro), Responsibilities (What You'll Be Doing list), Requirements (clearance, experience, certifications), Qualifications (maybe desired skills?), Skills (maybe required and desired skills combined?), Benefits, Pay, Schedule (none). There's no schedule info, so we should not create Schedule section. We need to decide mapping: - About the role: introductory paragraph(s) describing the role and team. - Responsibilities: the "What You'll Be Doing" list (the bullet list of duties). Could also include some of the earlier description but we can keep responsibilities as that list. - Requirements: mandatory items: TS/SCI clearance active/current, 11+ years experience, CISSP certification or equivalent, at least one year experience leading team. Also maybe "Security Clearance Requirement" paragraph. - Qualifications: maybe the "What Desired Skills You'll Bring" list? Or we could treat desired skills as Qualifications. But we also have Skills section for required/desired skills? The instruction says use headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to allocate content accordingly. We could map: - Requirements: mandatory qualifications (clearance, years, cert, leadership experience). - Qualifications: desired qualifications (desired skills list). Or maybe Qualifications is for education/degrees? Not present. Could combine desired skills into Skills. - Skills: maybe both required and desired skills? But we already used Requirements for mandatory experience/cert. Could put required skills (like penetration testing, vuln assessment, etc.) under Skills. However the posting lists "Demonstrated experience in at least several of the following areas:" which is a list of skill areas. That could be Skills. Thus: - Requirements: clearance, 11+ years, CISSP, 1 year leadership. - Skills: the list of areas (penetration testing, vulnerability assessment and management, threat hunting, incident response, security monitoring and event analysis, SOC operations, security control assessment, RMF and ATO support, configuration and patch management, cybersecurity compliance, experience developing reports, policies, procedures, playbooks, experience communicating risks to technical and nontechnical stakeholders, strong leadership, analytical, problem-solving, written, verbal communication skills). That is a mix of required and desired? Actually that list is under "Demonstrated experience in at least several of the following areas:" under Required Skills. So it's required skill areas. - Qualifications: desired skills list (the "What Desired Skills You'll Bring"). - Benefits: paragraph about benefits. - Pay: salary range. - Schedule: none -> omit. - About the role: introductory paragraph(s) before responsibilities. - Responsibilities: the "What You'll Be Doing" list. We need to ensure we don't repeat content. Let's extract. Introductory paragraphs: The first paragraph after the imaginative tagline: "Parsons is seeking an experienced Cybersecurity Lead to lead a high-performing defensive cyber operations team supporting a large-scale Government cybersecurity program. This is an opportunity to shape and grow an integrated cybersecurity capability responsible for identifying vulnerabilities, detecting advanced threats, responding to incidents, maintaining compliance, and protecting mission-critical systems and networks. As the Cybersecurity Lead, you will provide technical and operational leadership for a team performing penetration testing, vulnerability assessments, threat hunting, incident response, security monitoring, vulnerability and configuration management, and Security Operations Center support. You will help establish the team’s structure, processes, priorities, and operating rhythm while ensuring cybersecurity services are delivered effectively and in accordance with Government requirements. You will serve as both a team leader and a senior cybersecurity subject matter expert. Working closely with Government stakeholders, Parsons program leadership, and technical teams across the enterprise, you will assess risk, guide defensive operations, develop actionable recommendations, and help strengthen the customer’s security posture. You will also have access to the expertise, tools, and best practices of Parsons’ Cybersecurity Center of Excellence. The ideal candidate is a mission-focused cybersecurity professional who can lead technical teams, make sound risk-based decisions, communicate effectively with senior stakeholders, and remain hands-on when complex cybersecurity challenges arise. You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team." That is a big block. Could be considered About the role. Now Responsibilities: The "What You'll Be Doing" list: - Lead, organize, mentor, and support a team of cybersecurity professionals conducting defensive cyber operations. - Oversee penetration testing and security assessments designed to identify weaknesses in networks, applications, systems, and operational technology environments. - Direct vulnerability assessment activities, including recurring vulnerability scans, analysis of findings, risk prioritization, reporting, and remediation tracking. - Lead proactive threat-hunting activities to identify hidden, persistent, or advanced threats across IT and OT environments. - Oversee continuous monitoring and investigation of anomalous activity and potential security incidents. - Direct incident response activities, including detection, analysis, containment, eradication, recovery, escalation, and lessons learned. - Support the operation of a centralized Security Operations Center capability responsible for coordinating defensive security activities. - Coordinate security event analysis, trend analysis, alert investigation, and response activities across cybersecurity and IT operations teams. - Develop, maintain, and improve cybersecurity policies, procedures, playbooks, SOPs, and incident response processes. - Ensure cybersecurity findings and incidents are accurately documented, classified, escalated, and reported within required timelines. - Oversee the development and maintenance of Authority to Operate and Assess-Only authorization packages. - Support Risk Management Framework activities by coordinating technical evidence, security documentation, continuous monitoring data, and compliance artifacts. - Manage applicable cybersecurity orders, taskers, directives, and remediation requirements. - Oversee the development and tracking of Plans of Action and Milestones when requirements cannot be fully satisfied within the prescribed timeframe. - Lead vulnerability and configuration management activities, including secure configuration, patching, STIG compliance, and attack-surface reduction. - Promote Infrastructure as Code and Configuration as Code practices that support controlled, auditable, and security-reviewed changes. - Coordinate with infrastructure, cloud, DevSecOps, application, data, and operations teams to address cybersecurity risks. - Evaluate emerging cybersecurity technologies, tools, and practices and provide recommendations based on mission value, risk, cost, and implementation requirements. - Develop cybersecurity reports, briefings, metrics, risk assessments, and recommendations for Government and program leadership. - Track operational performance, staffing requirements, service quality, and team workload. - Identify cybersecurity risks, resource limitations, process gaps, and opportunities for continuous improvement. - Support transition-in, transition-out, surge staffing, training, and continuity of operations activities. - Ensure all work is performed in accordance with applicable Government cybersecurity requirements, Government-approved policies, contract requirements, and security procedures. That's a long list; we will put as
- items. Now Requirements: Mandatory: - TS/SCI clearance active/current - Eleven or more years of experience in cybersecurity, cyber operations, information assurance, information security, or a related field. - CISSP certification or an equivalent industry-recognized cybersecurity certification. - At least one year of experience leading, supervising, mentoring, or coordinating a cybersecurity, SOC, incident response, vulnerability management, or related technical team. Also maybe "Security Clearance Requirement: An active Top Secret SCI security clearance is required for this position." That's duplicate; we can include just once. Now Skills: The list under "Demonstrated experience in at least several of the following areas:": - Penetration testing - Vulnerability assessment and management - Threat hunting - Incident response - Security monitoring and event analysis - Security Operations Center operations - Security control assessment - RMF and ATO support - Configuration and patch management