Vulnerability Disclosure Analyst - Senior

Job Description:

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Parsons is seeking Cyber Vulnerability Intake and Triage Analysts to support mission-critical vulnerability disclosure and cybersecurity operations.

These professionals will manage vulnerability reports from initial receipt through validation, prioritization, disposition, remediation tracking, and closure.

The successful candidate will be comfortable evaluating technical reports, coordinating with researchers and system owners, documenting findings, and ensuring that vulnerability information is accurately maintained in enterprise tracking systems

What You'll Be Doing:

• Receive and manage vulnerability reports submitted through DoW and Defense Industrial Base vulnerability disclosure programs.
• Maintain designated intake channels for vulnerability reporting.
• Log incoming reports into a centralized tracking system within required time frames.
• Review reports for completeness, scope, impact, and exploitability.
• Assign vulnerability priority using an established impact-and-exploitability matrix.
• Conduct or coordinate technical validation using vulnerability scanners, manual testing, and other appropriate tools.
• Identify reports that require clarification or additional technical information.
  * Prepare clear communications to researchers describing deficiencies and required information.
• Recommend report dispositions, including closure, further investigation, referral, or informational status.
• Document analysis, rationale, communications, and status updates in the vulnerability tracking system.
• Coordinate with system owners regarding remediation plans and risk acceptance.
• Track approved Plans of Action and Milestones and support final report closure.
• Work collaboratively with vulnerability analysts, system owners, researchers, and Government stakeholders.

What Required Skills You'll Bring:

• Bachelor’s degree and 10+ years of relevant experience.
• An current/active TS/SCI clearance
• Experience in cybersecurity operations, vulnerability management, security assessment, or incident analysis.
• Understanding of vulnerability assessment and validation processes.
• Ability to evaluate technical impact and exploitability.
• Experience documenting findings in ticketing, case-management, or vulnerability-management systems.
• Strong written and verbal communication skills.
• Ability to manage multiple reports and competing priorities.
• Strong analytical and problem-solving skills.
• Ability to work effectively in a collaborative, mission-focused environment.

What Desired Skills You'll Bring:

• Experience supporting DoD, Federal Government, intelligence community, or defense industrial base cybersecurity programs.
• Knowledge of CVE, CVSS, CWE, vulnerability disclosure, and coordinated vulnerability disclosure practices.
• Familiarity with vulnerability scanners and application or infrastructure testing tools.
• Experience with Service Now, Jira, Archer, eMASS, or comparable tracking systems.
• Security+, CySA+, CEH, CISSP, or comparable cybersecurity certification.
• Experience with technical report writing and customer-facing communications.
• Familiarity with RMF, STIGs, security controls, and vulnerability remediation processes.

Security Clearance Requirement:

An active Top Secret SCI security clearance is required for this position.

This position is part of our Federal Solutions team.

The Federal Solutions segment delivers resources to our US…