Cyber Threat Analyst

Job Description

Parsons is looking for a Cyber Threat Analyst to join our team. In this role you will identify and assess the capabilities and activities of cyber criminals and/or foreign intelligence entities. You will work as part of a team that analyzes disparate data sets to discover and inform cyber operations with the goal to prevent and eradicate threats to critical U.S. systems.

• Identify and assess capabilities and activities of cyber criminals and foreign intelligence entities.
• Analyze disparate data sets to discover and inform cyber operations targeting critical U.S. systems.
• Extract and enrich data from various formats to enhance its value.
• Work with development teams to articulate requirements and enhancements to capabilities and tools.
• Create general queries, fingerprinting, and identify atypical events using XKS.
• Develop visualizations and dashboards in Elastic/Splunk or other SIEMs.
• Analyze packet capture traffic in Wireshark and understand TCP/IP communication protocols and packet flows.
• Write signatures in Zeek and/or Snort.
• Perform log file analysis and create threat intelligence reports indicating findings, mitigations, and confidence.
• Use advanced analytics, network diagrams, and other knowledge to understand systems, networks, environments, and adversaries.
• Collaborate with IC mission cybersecurity analysts to understand the adversary and develop mission-specific TTPs.

• Bachelor’s Degree in computer science, information systems, network forensics, or other data analysis roles.
• 10+ years’ experience in intelligence, information security, network forensics, or insider threat.
• Exposure to Industrial Control Systems (ICS)/SCADA is a bonus.
• Proficiency in data extraction, enrichment, and analysis.
• Experience working with development teams to specify requirements and enhancements.
• Experience with XKS, Elastic/Splunk, and other SIEMs.
• Proficiency in TCP/IP, packet capture analysis, and Wireshark.
• Experience writing signatures in Zeek and/or Snort.
• Experience in log file analysis and threat intelligence reporting.
• Experience with advanced analytics and network diagrams.
• Experience with IC mission cybersecurity analysts and mission-specific TTP development.
• Active TS/SCI security clearance with polygraph (mandatory).

None (but required TS/SCI with polygraph for role).

Salary Range: $ - $

Benefits include medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays.

Parsons is an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status, or any other protected status.