Intrusion Analyst - (Mid-Sr Levels)

Parsons; Baltimore (MD); On-site; USD 125,000 - 225,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Paid time off

401(k)

Life insurance

Flexible work schedules

Holidays

Job summary

Parsons is seeking an experienced Intrusion Analyst (Mid-Sr) to conduct forensic examinations of network intrusions, malicious activity, compromised systems, and cybersecurity incidents. You will develop actionable analysis to support investigative operations and prepare professional Malware Analysis Reports.

Required active Secret clearance, BS in a related field, and 8+ years of intrusion-analysis or digital-forensics experience for senior levels.

Qualifications

• Bachelor’s degree required in Digital Forensics, Cybersecurity, IT, Criminal Justice, or related field; 4 years of hands-on digital-forensics or intrusion-analysis may substitute for degree.

Responsibilities

• Conduct forensic examinations of network intrusions and cyber incidents.
• Develop scripts and utilities for artifact triage, extraction, timeline development, and repetitive analysis tasks.
• Identify indicators of compromise and adversary behaviors across networks.

Skills

Active Secret clearance

Digital forensics

Intrusion analysis

Cybersecurity

Report writing

Education

Bachelor's degree in Digital Forensics / Cybersecurity

Tools

Malware analysis tools

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next!At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Job Description:

Parsons is looking for an amazingly talented Intrusion Analyst (Mid-Sr levels) to join our team! In this role, you will conduct forensic examinations of network intrusions, malicious activity, compromised systems, advanced persistent threats, and cyber incidents while developing actionable analysis to support investigative and cybersecurity operations.

What You'll Be Doing:

• Conduct forensic examinations involving network intrusions, malicious activity, compromised systems, advanced persistent threat activity, and cyber incidents.
• Develop or maintain scripts and analytical utilities for artifact triage, artifact extraction, timeline development, and repetitive examination tasks.
• Identify indicators of compromise, persistence mechanisms, lateral-movement activity, command-and-control activity, privilege escalation, credential abuse, and other adversary behaviors.
• Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.
• Conduct initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
• Maintain accurate chain-of-custody documentation and ensure evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
• Prepare complete, technically accurate, and professionally formatted Malware Analysis Reports.
• Validate malware-analysis tools, document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices, as assigned.
• Participate in technical peer reviews of forensic reports and incorporate review comments.
• Support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
• Support quality-assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
• Support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
• Provide technical input to training, mentorship, process-improvement, and lessons-learned activities.

What Required Skills You'll Bring:

• Active Secret clearance; Top Secret clearance with SCI eligibility is preferred.
• Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field. Four years of hands-on digital-forensics or intrusion-analysis experience may be substituted for the degree.

Hands-on digital-forensics or intrusion-analysis experience appropriate to the assigned level:

• Intrusion Analyst 3: Minimum of eight years.
• Intrusion Analyst 4: Minimum of 12 years.

• Ability to analyze network intrusions, malicious activity, compromised systems, advanced persistent threats, and cyber incidents.
• Experience identifying indicators of compromise, persistence mechanisms, lateral movement, command-and-control activity, privilege escalation, credential abuse, and other adversary behaviors.
• Ability to perform forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.
• Experience maintaining chain-of-custody documentation and handling evidence in accordance with laboratory procedures and security requirements.
• Ability to prepare accurate, complete, and professionally formatted Malware Analysis Reports.
• Strong analytical, technical, investigative, documentation, and written communication skills.
• Ability to work independently and collaborate effectively with investigators, cybersecurity personnel, technical reviewers, government representatives, and multidisciplinary teams.

What Desired Skills You'll Bring:

• Formal training dedicated to expert-witness testimony, rules of evidence, and courtroom procedure, such as DC3's 40-hour Forensic Trial Training course, completed within the last three years when required for assigned duties.
• Experience developing scripts and analytical utilities for artifact triage, extraction, timeline development, or repetitive analysis tasks.
• Experience validating malware-analysis tools, verifying tool outputs, documenting validation results, and using version-control practices.
• Experience supporting peer review, expert-witness preparation, affidavits, warrants, depositions, moot court sessions, or courtroom testimony
• Experience supporting quality-assurance programs, SOP implementation, accreditation activities, competency testing, audits, and laboratory metrics.
• Experience analyzing malware, network traffic, system artifacts, persistence mechanisms, lateral movement, command-and-control activity, and advanced persistent threat behavior.
• Experience supporting training, mentorship, process improvement, and lessons-learned activities.
• At least one active certification, or an equivalent certification approved by the COR, including
  • GIAC Certified Incident Handler
  • EC-Council Certified Incident Handler
  • GIAC Certified Forensic Analyst
  • DC3 Cyber Training Academy Digital Forensic Examiner

Security Clearance Requirement:

An active Secret security clearance is required for this position. This position is part of our Federal Solutions team. The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-kite teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.

Salary Range: $125,100.00 - $225,200.00

We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle! Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status. We truly invest and care about our employee's wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest