Intrusion Analysis Technical Lead
Parsons Corporation · Linthicum, MD · 1 mo ago
Engineering$125k–$225k/yrFull-time
We need to output HTML fragment with sections: headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Preserve all substantive info.
We need to parse the posting.
Let's extract sections:
- Intro paragraph: "In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible." This is about the company culture; could be "About the role" or maybe "About Parsons". The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can put intro under
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Preserve all substantive info.
We need to parse the posting.
Let's extract sections:
- Intro paragraph: "In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible." This is about the company culture; could be "About the role" or maybe "About Parsons". The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can put intro under About the role
maybe.
- Job Description paragraph: "Parsons is looking for an experienced Intrusion Analysis Technical Lead to help guide a team of cyber analysts performing high-impact investigations in support of critical mission objectives. This role offers the opportunity to combine deep technical analysis skills with leadership, mentorship, and continuous improvement in an environment where technical excellence and mission success go hand in hand." Could be part of About the role.
- Then "In this role, you will serve as a technical leader..." That's responsibilities.
- Then "You will help guide the team’s technical approach..." also responsibilities.
- Then "This position is ideal for someone who enjoys staying close to the technical work while also helping others succeed." responsibilities.
- Then "You will collaborate closely..." responsibilities.
- Then "You’ll play a key role..." responsibilities.
- Then "You’ll be joining Parsons’ local Analytics & Engineering team..." maybe about team/culture.
- Then "We invest in both mission success and team connection through regular social events..." benefits? Could be benefits.
- Then "From team lunches and ice cream socials..." benefits.
- Then "What You’ll Be Doing" list: bullet points (actually lines). Those are responsibilities.
- Then "What Required Skills You’ll Bring" list: qualifications/requirements.
- Then "What Desired Skills You’ll Bring" list: desired skills.
- Then "Security Clearance Requirement" paragraph: requirement.
- Then "This position is part of our Federal Solutions team." maybe about company.
- Then "Salary Range: $125,100.00 - $225,200.00" => Pay section.
- Then "We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!" => Benefits.
- Then EEO statement etc -> remove.
- Then "Parsons is aware of fraudulent recruitment practices..." -> remove (scam-warning).
Thus we need sections: About the role (intro + job description + team description?), Responsibilities (What You’ll Be Doing + earlier responsibility paragraphs), Requirements (What Required Skills You’ll Bring + Security Clearance Requirement maybe), Qualifications (maybe same as Requirements? but we can combine), Skills (Desired Skills), Benefits, Pay. Schedule not present, so omit.
We must not create sections with filler like "commensurate with experience". Not needed.
We need to use - for any list of duties/requirements/benefits. So for responsibilities list (What You’ll Be Doing) we need
- . Also for Required Skills list, Desired Skills list, Benefits list.
We need to preserve all substantive information; do not invent or summarize away detail. So we need to keep each bullet point exactly as in text.
Let's extract bullet points.
From "What You’ll Be Doing":
- Serve as the technical lead for a team performing advanced intrusion analysis in support of customer mission objectives
- Guide investigations involving host-based and network-based forensic analysis
- Support and perform malware analysis and reverse engineering to better understand adversary behavior and malicious code
- Help the team identify, analyze, and correlate indicators across multiple data sources to assess cyber threats and intrusion activity
- Provide technical mentorship, guidance, and support to analysts working complex investigations
- Promote analytic rigor, sound investigative methodology, and cybersecurity best practices
- Help improve workflows, tools, and techniques as new technologies and mission needs evolve
- Collaborate with internal stakeholders and technical teammates to ensure high-quality, mission-relevant analysis
- Contribute to technical reporting and communication of findings to support customer decision-making
Now "What Required Skills You’ll Bring":
- Active TS/SCI clearance
- GCIH or equivalent cybersecurity certification
- Bachelors degree with 8+ years experience
- At least 5 years of recent experience leading technical efforts and supervising teams in a digital forensics laboratory environment
- At least 7 years of experience performing digital and multimedia (D/MM) forensics examinations, analysis, and techniques
- Experience within the last 7 years working with MS Windows, Apple/UNIX, and Linux operating systems related to forensics examinations
- Experience within the last 7 years with forensic network analysis in support of the investigative process
- Experience within the last 7 years analyzing endpoint, Packet Capture (PCAP) data, and other relevant data sources
- Experience within the last 5 years utilizing common digital forensic examination tools, including FTK, EnCase, and X-Ways
- Demonstrated experience with both network-based and host-based forensics, malware analysis, and/or reverse engineering
- Strong understanding of cyber intrusion analysis, adversary behavior, and investigative tradecraft
- Ability to provide technical leadership and mentorship within a team environment
- Strong written and verbal communication skills
Now "What Desired Skills You’ll Bring":
- Experience supporting Government or national security cybersecurity missions
- Experience correlating data across host, network, malware, and forensic sources
- Familiarity with advanced threat activity, including persistent or sophisticated intrusion techniques
- Proven ability to improve analytic workflows, technical quality, and team effectiveness
- Passion for mentoring analysts and helping technical teams grow
Now Benefits list: "medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays". We'll make each as
- .
Now Pay: Salary Range: $125,100.00 - $225,200.00.
Now About the role: combine intro paragraphs and maybe team description. Let's gather substantive paragraphs not part of responsibilities/requirements/skills/benefits/pay.
Intro: "In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible."
Job Description first paragraph: "Parsons is looking for an experienced Intrusion Analysis Technical Lead to help guide a team of cyber analysts performing high-impact investigations in support of critical mission objectives. This role offers the opportunity to combine deep technical analysis skills with leadership, mentorship, and continuous improvement in an environment where technical excellence and mission success go hand in hand."
Team description: "You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team."
Also maybe "This position is part of our Federal Solutions team. The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now." This is also about company but could be included in About the role.
We must not include EEO etc. So we can include that as part of About the role.
Thus About the role section will contain multiple
paragraphs.
Now we need to ensure we don't duplicate content. The responsibilities section already includes the "What You’ll Be Doing" list; we also have earlier responsibility paragraphs that may be similar but we should keep them? The instruction: preserve ALL substantive information; do NOT invent or summarize away detail. So we need to keep those earlier paragraphs as well, not just the list. However they may be redundant with the list but we must keep them. So we will include them as
under Responsibilities before the list.
Similarly for Requirements we may have the Security Clearance Requirement paragraph separate from the list; we should keep it.
Thus structure:
About the role
Intro paragraph
Job Description paragraph
Team description paragraph(s)
Federal Solutions description paragraph(s)
Responsibilities
In this role, you will serve as a technical leader for analysts performing advanced cyber analysis, including host-based and network-based forensic analysis, malware analysis, and reverse engineering. You will help guide the team’s technical approach, support complex investigations, and ensure high-quality analysis that enables our customer to better understand, detect, and respond to sophisticated cyber threats. Your expertise will be instrumental in maintaining technical rigor, improving analytic workflows, and adapting the team’s methods as new technologies and threats emerge.
This position is ideal for someone who enjoys staying close to the technical work while also helping others succeed. You will collaborate closely with a highly skilled team of analysts, providing technical direction, mentorship, and day-to-day support to strengthen team performance and help individuals grow in their careers. You’ll play a key role in elevating analytic quality, sharing best practices, and fostering a culture of technical excellence across the team.
- Serve as the technical lead for a team performing advanced intrusion analysis in support of customer mission objectives
- Guide investigations involving host-based and network-based forensic analysis
- Support and perform malware analysis and reverse engineering to better understand adversary behavior and malicious code
- Help the team identify, analyze, and correlate indicators across multiple data sources to assess cyber threats and intrusion activity
- Provide technical mentorship, guidance, and support to analysts working complex investigations
- Promote analytic rigor, sound investigative methodology, and cybersecurity best practices
- Help improve workflows, tools, and techniques as new technologies and mission needs evolve
- Collaborate with internal stakeholders and technical teammates to ensure high-quality, mission-relevant analysis
- Contribute to technical reporting and communication of findings to support customer decision-making
Requirements
Active TS/SCI clearance is required for this position.
- GCIH or equivalent cybersecurity certification
- Bachelors degree with 8+ years experience
- At least 5 years of recent experience leading technical efforts and supervising teams in a digital forensics laboratory environment
- At least 7 years of experience performing digital and multimedia (D/MM) forensics examinations,
- . Also for Required Skills list, Desired Skills list, Benefits list. We need to preserve all substantive information; do not invent or summarize away detail. So we need to keep each bullet point exactly as in text. Let's extract bullet points. From "What You’ll Be Doing": - Serve as the technical lead for a team performing advanced intrusion analysis in support of customer mission objectives - Guide investigations involving host-based and network-based forensic analysis - Support and perform malware analysis and reverse engineering to better understand adversary behavior and malicious code - Help the team identify, analyze, and correlate indicators across multiple data sources to assess cyber threats and intrusion activity - Provide technical mentorship, guidance, and support to analysts working complex investigations - Promote analytic rigor, sound investigative methodology, and cybersecurity best practices - Help improve workflows, tools, and techniques as new technologies and mission needs evolve - Collaborate with internal stakeholders and technical teammates to ensure high-quality, mission-relevant analysis - Contribute to technical reporting and communication of findings to support customer decision-making Now "What Required Skills You’ll Bring": - Active TS/SCI clearance - GCIH or equivalent cybersecurity certification - Bachelors degree with 8+ years experience - At least 5 years of recent experience leading technical efforts and supervising teams in a digital forensics laboratory environment - At least 7 years of experience performing digital and multimedia (D/MM) forensics examinations, analysis, and techniques - Experience within the last 7 years working with MS Windows, Apple/UNIX, and Linux operating systems related to forensics examinations - Experience within the last 7 years with forensic network analysis in support of the investigative process - Experience within the last 7 years analyzing endpoint, Packet Capture (PCAP) data, and other relevant data sources - Experience within the last 5 years utilizing common digital forensic examination tools, including FTK, EnCase, and X-Ways - Demonstrated experience with both network-based and host-based forensics, malware analysis, and/or reverse engineering - Strong understanding of cyber intrusion analysis, adversary behavior, and investigative tradecraft - Ability to provide technical leadership and mentorship within a team environment - Strong written and verbal communication skills Now "What Desired Skills You’ll Bring": - Experience supporting Government or national security cybersecurity missions - Experience correlating data across host, network, malware, and forensic sources - Familiarity with advanced threat activity, including persistent or sophisticated intrusion techniques - Proven ability to improve analytic workflows, technical quality, and team effectiveness - Passion for mentoring analysts and helping technical teams grow Now Benefits list: "medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays". We'll make each as
- .
Now Pay: Salary Range: $125,100.00 - $225,200.00.
Now About the role: combine intro paragraphs and maybe team description. Let's gather substantive paragraphs not part of responsibilities/requirements/skills/benefits/pay.
Intro: "In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible."
Job Description first paragraph: "Parsons is looking for an experienced Intrusion Analysis Technical Lead to help guide a team of cyber analysts performing high-impact investigations in support of critical mission objectives. This role offers the opportunity to combine deep technical analysis skills with leadership, mentorship, and continuous improvement in an environment where technical excellence and mission success go hand in hand."
Team description: "You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team."
Also maybe "This position is part of our Federal Solutions team. The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now." This is also about company but could be included in About the role.
We must not include EEO etc. So we can include that as part of About the role.
Thus About the role section will contain multiple
paragraphs. Now we need to ensure we don't duplicate content. The responsibilities section already includes the "What You’ll Be Doing" list; we also have earlier responsibility paragraphs that may be similar but we should keep them? The instruction: preserve ALL substantive information; do NOT invent or summarize away detail. So we need to keep those earlier paragraphs as well, not just the list. However they may be redundant with the list but we must keep them. So we will include them as
under Responsibilities before the list. Similarly for Requirements we may have the Security Clearance Requirement paragraph separate from the list; we should keep it. Thus structure:
About the role
Intro paragraph
Job Description paragraph
Team description paragraph(s)
Federal Solutions description paragraph(s)
Responsibilities
In this role, you will serve as a technical leader for analysts performing advanced cyber analysis, including host-based and network-based forensic analysis, malware analysis, and reverse engineering. You will help guide the team’s technical approach, support complex investigations, and ensure high-quality analysis that enables our customer to better understand, detect, and respond to sophisticated cyber threats. Your expertise will be instrumental in maintaining technical rigor, improving analytic workflows, and adapting the team’s methods as new technologies and threats emerge.
This position is ideal for someone who enjoys staying close to the technical work while also helping others succeed. You will collaborate closely with a highly skilled team of analysts, providing technical direction, mentorship, and day-to-day support to strengthen team performance and help individuals grow in their careers. You’ll play a key role in elevating analytic quality, sharing best practices, and fostering a culture of technical excellence across the team.
- Serve as the technical lead for a team performing advanced intrusion analysis in support of customer mission objectives
- Guide investigations involving host-based and network-based forensic analysis
- Support and perform malware analysis and reverse engineering to better understand adversary behavior and malicious code
- Help the team identify, analyze, and correlate indicators across multiple data sources to assess cyber threats and intrusion activity
- Provide technical mentorship, guidance, and support to analysts working complex investigations
- Promote analytic rigor, sound investigative methodology, and cybersecurity best practices
- Help improve workflows, tools, and techniques as new technologies and mission needs evolve
- Collaborate with internal stakeholders and technical teammates to ensure high-quality, mission-relevant analysis
- Contribute to technical reporting and communication of findings to support customer decision-making
Requirements
Active TS/SCI clearance is required for this position.
- GCIH or equivalent cybersecurity certification
- Bachelors degree with 8+ years experience
- At least 5 years of recent experience leading technical efforts and supervising teams in a digital forensics laboratory environment
- At least 7 years of experience performing digital and multimedia (D/MM) forensics examinations,