Intrusion Analysis Technical Lead

Parsons; Linthicum (MD); On-site; USD 125,000 - 225,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

Paid time off

401(k)

Life insurance

Flexible work schedules

Holidays

Job summary

Parsons is seeking an experienced Intrusion Analysis Technical Lead to guide a team of cyber analysts in high-impact investigations supporting mission objectives. You will lead host-based and network-based forensic work, malware analysis, and reverse engineering while mentoring staff and improving analytic workflows.

The role combines hands-on technical work with leadership in a Cyber/Analytics environment at Parsons’ Cybersecurity Center.

Qualifications

• Active TS/SCI clearance required.
• GCIH or equivalent cybersecurity certification.
• Bachelors degree with 8+ years experience in the field.
• 7+ years leading technical efforts in forensics environments.
• 7+ years performing digital/multimedia forensics and analysis.
• Experience with Windows, UNIX/Linux in forensics contexts.
• Proficient in FTK, EnCase, and X-Ways tools.

Responsibilities

• Serve as technical lead for intrusion analysis and investigations.
• Guide host-based and network-based forensic investigations.
• Mentor analysts and oversee complex investigations.
• Improve analytic workflows and defend analytic rigor.
• Collaborate with stakeholders to deliver high-quality analysis.
• Contribute to technical reporting and findings communications.

Skills

TS/SCI clearance

GCIH

Leadership

Digital forensics

PCAP analysis

Malware analysis

Reverse engineering

Education

Bachelor's degree

Tools

FTK

EnCase

X-Ways

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Job Description:

Parsons is looking for an experienced Intrusion Analysis Technical Lead to help guide a team of cyber analysts performing high-impact investigations in support of critical mission objectives. This role offers the opportunity to combine deep technical analysis skills with leadership, mentorship, and continuous improvement in an environment where technical excellence and mission success go hand in hand.

In this role, you will serve as a technical leader for analysts performing advanced cyber analysis, including host-based and network-based forensic analysis, malware analysis, and reverse engineering. You will help guide the team’s technical approach, support complex investigations, and ensure high-quality analysis that enables our customer to better understand, detect, and respond to sophisticated cyber threats. Your expertise will be instrumental in maintaining technical rigor, improving analytic workflows, and adapting the team’s methods as new technologies and threats emerge.

This position is ideal for someone who enjoys staying close to the technical work while also helping others succeed. You will collaborate closely with a highly skilled team of analysts, providing technical direction, mentorship, and day‑to‑day support to strengthen team performance and help individuals grow in their careers. You’ll play a key role in elevating analytic quality, sharing best practices, and fostering a culture of technical excellence across the team.

You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands‑on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family‑friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team.

What You’ll Be Doing

• Serve as the technical lead for a team performing advanced intrusion analysis in support of customer mission objectives

• Guide investigations involving host-based and network-based forensic analysis

• Support and perform malware analysis and reverse engineering to better understand adversary behavior and malicious code

• Help the team identify, analyze, and correlate indicators across multiple data sources to assess cyber threats and intrusion activity

• Provide technical mentorship, guidance, and support to analysts working complex investigations

• Promote analytic rigor, sound investigative methodology, and cybersecurity best practices

• Help improve workflows, tools, and techniques as new technologies and mission needs evolve

• Collaborate with internal stakeholders and technical teammates to ensure high‑quality, mission‑relevant analysis

• Contribute to technical reporting and communication of findings to support customer decision‑making

What Required Skills You’ll Bring

• Active TS/SCI clearance

• GCIH or equivalent cybersecurity certification

• Bachelors degree with 8+ years experience

• At least 5 years of recent experience leading technical efforts and supervising teams in a digital forensics laboratory environment

• At least 7 years of experience performing digital and multimedia (D/MM) forensics examinations, analysis, and techniques

• Experience within the last 7 years working with MS Windows, Apple/UNIX, and Linux operating systems related to forensics examinations

• Experience within the last 7 years with forensic network analysis in support of the investigative process

• Experience within the last 7 years analyzing endpoint, Packet Capture (PCAP) data, and other relevant data sources

• Experience within the last 5 years utilizing common digital forensic examination tools, including FTK, EnCase, and X-Ways

• Demonstrated experience with both network‑based and host‑based forensics, malware analysis, and/or reverse engineering

• Strong understanding of cyber intrusion analysis, adversary behavior, and investigative tradecraft

• Ability to provide technical leadership and mentorship within a team environment

• Strong written and verbal communication skills

What Desired Skills You’ll Bring

• Experience supporting Government or national security cybersecurity missions

• Experience correlating data across host, network, malware, and forensic sources

• Familiarity with advanced threat activity, including persistent or sophisticated intrusion techniques

• Proven ability to improve analytic workflows, technical quality, and team effectiveness

• Passion for mentoring analysts and helping technical teams grow

Security Clearance Requirement:

An active Top Secret SCI security clearance is required for this position.

This position is part of our Federal Solutions team.

The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close‑knit teams that take pride in delivering, protecting, and sustaining our nation’s most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.

Salary Range: $125,100.00 - $225,200.00

We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best‑in‑class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!

Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.

About Us

Parsons is a digitally enabled solutions provider focused on the defense, security, and infrastructure markets. With nearly 75 years of experience, Parsons is uniquely qualified to deliver cyber/converged security, technology‑based intellectual property, and other innovative services to federal, regional, and local government agencies, as well as to private industrial customers worldwide.

Parsons is an equal opportunity, drug‑free employer committed to diversity in the workplace. Minority/Female/Disabled/Protected Veteran/LGBTQ+.

For more about Parsons, visit parsons.com and follow us on Facebook, Twitter, LinkedIn, and YouTube.