Incident Response Lead

About the role

In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible. Parsons is looking for an experienced Incident Response Lead to guide a team performing high-impact cyber investigations and analysis in support of critical mission objectives. This role offers the opportunity to combine deep incident response expertise with leadership, mentorship, and continuous improvement in an environment where technical excellence and mission success go hand in hand.

Responsibilities

• Lead a team performing advanced incident response and cyber analysis in support of customer mission requirements
• Oversee investigations involving host-based and network-based forensic analysis
• Correlate data from multiple sources to identify, analyze, and track malicious activity, including APT behaviors and indicators
• Guide investigative efforts to determine scope, impact, root cause, and recommended response actions
• Ensure the team produces clear, accurate, and actionable reporting on findings and incident activity
• Promote incident response best practices, technical rigor, and continuous improvement across workflows and processes
• Evaluate and adopt emerging tools, technologies, and methodologies that improve incident response effectiveness
• Mentor analysts and support their technical development and career growth
• Collaborate with internal technical teams and stakeholders to strengthen mission outcomes and operational performance

Requirements

• Active TS/SCI clearance
• GCIH or equivalent incident response certification
• Bachelor’s degree and 8+ years experience
• 8+ years of hands-on experience in Digital Forensics and Incident Response (DFIR), with at least 5 years focused on network intrusion analysis, malware forensics, and memory analysis
• 3+ years in a leadership or supervisory role, responsible for leading intrusion investigations, managing incident responders, and briefing technical findings to leadership
• Demonstrated experience within the last three years analyzing advanced persistent threat (APT) activity and correlating findings from multiple data sources (e.g., host forensics, network logs, and threat intelligence)
• Strong understanding of cyber threat investigation, incident handling, and analytic tradecraft
• Ability to lead technical teams in a fast-paced cybersecurity environment
• Strong written and verbal communication skills

Skills

• Experience leading incident response teams supporting Government or national security missions
• Familiar