Intrusion Analysis Technical Lead

Parsons is looking for an experienced Intrusion Analysis Technical Lead to help guide a team of cyber analysts performing high-impact investigations in support of critical mission objectives.

This role offers the opportunity to combine deep technical analysis skills with leadership, mentorship, and continuous improvement in an environment where technical excellence and mission success go hand in hand.

In this role, you will serve as a technical leader for analysts performing advanced cyber analysis, including host-based and network-based forensic analysis, malware analysis, and reverse engineering.

You will help guide the team’s technical approach, support complex investigations, and ensure high-quality analysis that enables our customer to better understand, detect, and respond to sophisticated cyber threats.

Your expertise will be instrumental in maintaining technical rigor, improving analytic workflows, and adapting the team’s methods as new technologies and threats emerge.

This position is ideal for someone who enjoys staying close to the technical work while also helping others succeed.

You will collaborate closely with a highly skilled team of analysts, providing technical direction, mentorship, and day-to-day support to strengthen team performance and help individuals grow in their careers.

You’ll play a key role in elevating analytic quality, sharing best practices, and fostering a culture of technical excellence across the team.

You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration.

We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD.

From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team.

• Serve as the technical lead for a team performing advanced intrusion analysis in support of customer mission objectives
• Guide investigations involving host-based and network-based forensic analysis
• Support and perform malware analysis and reverse engineering to better understand adversary behavior and malicious code
• Help the team identify, analyze, and correlate indicators across multiple data sources to assess cyber threats and intrusion activity
• Provide technical mentorship, guidance, and support to analysts working complex investigations
• Promote analytic rigor, sound investigative methodology, and cybersecurity best practices
• Help improve workflows, tools, and techniques as new technologies and mission needs evolve
• Collaborate with internal stakeholders and technical teammates to ensure high-quality, mission-relevant analysis
• Contribute to technical reporting and communication of findings to support customer decision-making

• Active TS/SCI clearance
• GCIH or equivalent cybersecurity certification
• Bachelors degree with 8+ years experience
• At least 5 years of recent experience leading technical efforts and supervising teams in a digital forensics laboratory environment
• At least 7 years of experience performing digital and multimedia (D/MM) forensics examinations, analysis, and techniques
• Experience within the last 7 years working with MS Windows, Apple/UNIX, and Linux operating systems related to forensics examinations
• Experience within the last 7 years with forensic network analysis in support of the investigative process
• Experience within the last 7 years analyzing endpoint, Packet Capture (PCAP) data, and other relevant data sources
• Experience within the last 5 years utilizing common digital forensic examination tools, including FTK, EnCase, and X-Ways
• Demonstrated experience with both network-based and host-based forensics, malware analysis, and/or reverse engineering
• Strong understanding of cyber intrusion analysis, adversary behavior, and investigative tradecraft
• Ability to provide technical leadership and mentorship within a team environment
• Strong written and verbal communication skills

• Experience supporting Government or national security cybersecurity missions
• Experience correlating data across host, network, malware, and forensic sources
• Familiarity with advanced threat activity, including persistent or sophisticated intrusion techniques
• Proven ability to improve analytic workflows, technical quality, and team effectiveness
• Passion for mentoring analysts and helping technical teams grow

Parsons is aware of fraudulent recruitment practices.

To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.