Vulnerability Disclosure Analyst - Senior

Parsons; Baltimore (MD); On-site; USD 112,000 - 196,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Paid time off

401(k) plan

Life insurance

Flexible schedules

Holidays

Job summary

Parsons is seeking Cyber Vulnerability Intake and Triage Analysts to support vulnerability disclosure and cybersecurity operations. You will manage reports from intake through validation, prioritization, disposition, and closure, coordinating with researchers, system owners, and government stakeholders.

The role requires a Bachelor’s degree with 10+ years of relevant experience and an active TS/SCI clearance.

Qualifications

• Bachelor’s degree and 10+ years of relevant experience.
• Active TS/SCI clearance.
• Experience in cybersecurity operations, vulnerability management, security assessment, or incident analysis.
• Understanding of vulnerability assessment and validation processes.
• Ability to evaluate technical impact and exploitability.
• Experience documenting findings in ticketing/case-management/vulnerability-management systems.
• Strong written and verbal communication skills.
• Ability to manage multiple reports and competing priorities.
• Strong analytical and problem-solving skills.
• Ability to work collaboratively in a mission-focused environment.

Responsibilities

• Receive and manage vulnerability reports submitted through DoW and Defense Industrial Base programs.
• Maintain intake channels for vulnerability reporting.
• Log incoming reports into a centralized tracking system within required timeframes.
• Review reports for completeness, scope, impact, and exploitability.
• Assign vulnerability priority using an impact-and-exploitability matrix.
• Conduct or coordinate technical validation using scanners, manual testing, and other tools.
• Prepare clear communications to researchers describing deficiencies and required information.
• Recommend report dispositions and remediation actions.
• Document analysis, rationale, communications, and status updates in the tracking system.
• Coordinate with system owners regarding remediation plans and risk acceptance.
• Track Plans of Action and Milestones and support final report closure.
• Collaborate with vulnerability analysts, system owners, researchers, and Government stakeholders.

Skills

Cybersecurity operations

Vulnerability management

Documentation in tracking systems

Written and verbal communication

Analytical thinking

Multi-report management

Education

Bachelor’s degree

Tools

ServiceNow

Jira

Archer

eMASS

Job description

Job Description:

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Parsons is seeking Cyber Vulnerability Intake and Triage Analysts to support mission-critical vulnerability disclosure and cybersecurity operations. These professionals will manage vulnerability reports from initial receipt through validation, prioritization, disposition, remediation tracking, and closure.

The successful candidate will be comfortable evaluating technical reports, coordinating with researchers and system owners, documenting findings, and ensuring that vulnerability information is accurately maintained in enterprise tracking systems

What You'll Be Doing:

• Receive and manage vulnerability reports submitted through DoW and Defense Industrial Base vulnerability disclosure programs.
• Maintain designated intake channels for vulnerability reporting.
• Log incoming reports into a centralized tracking system within required timeframes.
• Review reports for completeness, scope, impact, and exploitability.
• Assign vulnerability priority using an established impact-and-exploitability matrix.
• Conduct or coordinate technical validation using vulnerability scanners, manual testing, and other appropriate tools.
• Identify reports that require clarification or additional technical information. * Prepare clear communications to researchers describing deficiencies and required information.
• Recommend report dispositions, including closure, further investigation, referral, or informational status.
• Document analysis, rationale, communications, and status updates in the vulnerability tracking system.
• Coordinate with system owners regarding remediation plans and risk acceptance.
• Track approved Plans of Action and Milestones and support final report closure.
• Work collaboratively with vulnerability analysts, system owners, researchers, and Government stakeholders.

What Required Skills You'll Bring:

• Bachelor’s degree and 10+ years of relevant experience.
• An current/active TS/SCI clearance
• Experience in cybersecurity operations, vulnerability management, security assessment, or incident analysis.
• Understanding of vulnerability assessment and validation processes.
• Ability to evaluate technical impact and exploitability.
• Experience documenting findings in ticketing, case-management, or vulnerability-management systems.
• Strong written and verbal communication skills.
• Ability to manage multiple reports and competing priorities.
• Strong analytical and problem-solving skills.
• Ability to work effectively in a collaborative, mission-focused environment.

What Desired Skills You'll Bring:

• Experience supporting DoD, Federal Government, intelligence community, or defense industrial base cybersecurity programs.
• Knowledge of CVE, CVSS, CWE, vulnerability disclosure, and coordinated vulnerability disclosure practices.
• Familiarity with vulnerability scanners and application or infrastructure testing tools.
• Experience with ServiceNow, Jira, Archer, eMASS, or comparable tracking systems.
• Security+, CySA+, CEH, CISSP, or comparable cybersecurity certification.
• Experience with technical report writing and customer-facing communications.
• Familiarity with RMF, STIGs, security controls, and vulnerability remediation processes.

Security Clearance Requirement:

An active Top Secret SCI security clearance is required for this position.This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.

Salary Range: $112,200.00 - $196,400.00

We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle! Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status. We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest.

Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer tohttps://www.parsons.com/fraudulent-recruitment/.