At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.
Job Description:
Parsons is looking for an experienced Incident Response Lead to guide a team performing high-impact cyber investigations and analysis in support of critical mission objectives. This role offers the opportunity to combine deep incident response expertise with leadership, mentorship, and continuous improvement in an environment where technical excellence and mission success go hand in hand.
In this role, you will lead a team responsible for conducting incident response activities, including host-based and network-based forensic analysis, identifying indicators of compromise, and correlating findings across multiple data sources to detect, investigate, and understand Advanced Persistent Threat (APT) activity. You will help ensure the team applies sound investigative tradecraft, maintains high technical standards, and evolves its methods as new tools, technologies, and threats emerge. Your leadership will directly support mission success by strengthening the team’s ability to identify and respond to sophisticated cyber threats.
This position is ideal for someone who combines deep incident response expertise with strong leadership and mentoring capability. You will work closely with a highly technical team, providing day-to-day leadership, mentorship, and support while helping team members strengthen their skills and advance their careers. You’ll also play an important role in improving processes, refining investigative workflows, and driving technical excellence across the team.
You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team.
What You’ll Be Doing
- Lead a team performing advanced incident response and cyber analysis in support of customer mission requirements
- Oversee investigations involving host-based and network-based forensic analysis
- Correlate data from multiple sources to identify, analyze, and track malicious activity, including APT behaviors and indicators
- Guide investigative efforts to determine scope, impact, root cause, and recommended response actions
- Ensure the team produces clear, accurate, and actionable reporting on findings and incident activity
- Promote incident response best practices, technical rigor, and continuous improvement across workflows and processes
- Evaluate and adopt emerging tools, technologies, and methodologies that improve incident response effectiveness
- Mentor analysts and support their technical development and career growth
- Collaborate with internal technical teams and stakeholders to strengthen mission outcomes and operational performance
What Required Skills You’ll Bring
- Active TS/SCI clearance
- GCIH or equivalent incident response certification
- Bachelors degree and 8+ years experience
- 8+ years of hands-on experience in Digital Forensics and Incident Response (DFIR), with at least 5 years focused on network intrusion analysis, malware forensics, and memory analysis
- 3+ years in a leadership or supervisory role, responsible for leading intrusion investigations, managing incident responders, and briefing technical findings to leadership
- Demonstrated experience within the last three years analyzing advanced persistent threat (APT) activity and correlating findings from multiple data sources (e.g., host forensics, network logs, and threat intelligence)
- Strong understanding of cyber threat investigation, incident handling, and analytic tradecraft
- Ability to lead technical teams in a fast-paced cybersecurity environment
- Strong written and verbal communication skills
What Desired Skills You’ll Bring
- Experience leading incident response teams supporting Government or national security missions
- Familiarity with threat hunting, malware analysis, digital forensics, and adversary tracking
- Experience correlating data across endpoint, network, log, and forensic sources
- Proven ability to improve incident response processes, technical quality, and team performance
- Passion for mentoring and developing highly technical cybersecurity professionals
Security Clearance Requirement:
An active Top Secret SCI security clearance is required for this position.This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.Salary Range: $134,100.00 - $241,400.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.
Skills Required
- Active TS/SCI security clearance
- GCIH or equivalent incident response certification
- Bachelor's degree
- 8+ years of professional experience
- 8+ years of hands-on Digital Forensics and Incident Response experience
- At least 5 years focused on network intrusion analysis, malware forensics, and memory analysis
- 3+ years in a leadership or supervisory role
- Experience leading intrusion investigations and managing incident responders
- Experience briefing technical findings to leadership
- Recent experience analyzing Advanced Persistent Threat activity and correlating multiple data sources
- Strong understanding of cyber threat investigation, incident handling, and analytic tradecraft
- Ability to lead technical teams in a fast-paced cybersecurity environment
- Strong written and verbal communication skills
- Experience leading incident response teams supporting Government or national security missions
- Familiarity with threat hunting, malware analysis, digital forensics, and adversary tracking
- Experience correlating endpoint, network, log, and forensic data
- Ability to improve incident response processes, technical quality, and team performance
- Passion for mentoring and developing cybersecurity professionals
Parsons Corporation Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Parsons Corporation and has not been reviewed or approved by Parsons Corporation.
-
Retirement Support — Retirement programs are framed as a major value driver, with an ESOP alongside a 401(k) match and additional stock-purchase options contributing meaningfully to total rewards. This structure is positioned as especially attractive for employees who value long-term wealth-building over immediate cash.
-
Healthcare Strength — Health coverage is described as broad and choice-rich, with multiple plan types (PPO, HDHP, and some HMO networks) plus dental, vision, EAP, and wellness resources. The availability of different plan designs and national-carrier coverage supports varied employee needs.
-
Leave & Time Off Breadth — Time-off offerings are portrayed as competitive, including PTO, holidays, flexible schedules such as a 9/80 option for eligible roles, and floating holidays in the U.S. Paid parental leave of 160 hours is also highlighted as a meaningful component of the overall package.
Parsons Corporation Insights
What We Do
Parsons is a digitally enabled solutions provider with a focus on making the world safer, smarter, healthier, more sustainable, and more connected. Founded in 1944, Parsons primarily serves the defense, security, and infrastructure markets. Uniquely qualified to deliver cyber/converged security, technology-based intellectual property, and other innovative services, the corporation delivers state-of-the-art solutions to federal, regional, and local government agencies as well as to private industrial customers worldwide. Parsons has a reputation for inclusion and diversity and has been named to the Ethisphere Institute’s list of World’s Most Ethical Companies for 10 consecutive years. Parsons facilitates a culture of innovation by encouraging collaboration among its employees and providing opportunities for career growth. With offices around the globe, people of varied talents and backgrounds, and a wide range of exciting projects, the possibilities at Parsons are endless. For more about Parsons, visit www.parsons.com. Mission: Delivering innovative infrastructure, defense, and security solutions to enable a more sustainable, safer, smarter, and more connected world.
