At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.
Job Description:
Parsons is looking for an amazingly talented Information Systems Security Manager to join our team! In this role you will get to lead the shift from static, point-in-time compliance assessments to a dynamic, real-time risk authorization posture RMF.
What You'll Be Doing:
- Govern a secure, pre-accredited DevSecOps platform designed for downstream applications to inherit security controls seamlessly.
- Define, implement, and maintain automated risk thresholds, security baselines, and compliance rules integrated directly into continuous integration/continuous deployment (CI/CD) pipelines
- Oversee real-time configuration tracking, live vulnerability assessments, and threat analytics to ensure ongoing compliance
- Act as the interface translating automated pipeline data, Software Bills of Materials (SBOMs), and tool generated security metrics into actionable risk acceptance frameworks to the Task Lead.
- Guide and orchestrate the POA&M process, transitioning it from a manual tracking spreadsheet to an automated, tool-driven lifecycle RMF
- Set formal governance criteria outlining exactly what level of security vulnerabilities (e.g., critical/high SAST, DAST, or container flaws) will automatically break a software build or block a production deployment DevSecOps Basics DevSecOps Roles & Responsibilities
- Validate that Terraform scripts, Helm charts, and cloud-native templates used to spin up environments are programmatically hardened against DISA STIGs and NIST baselines
- Enforce rigorous software supply chain security standards, including automated container scanning, open-source dependency tracking, signature validation, and compliance with SLSA frameworks Software Composition Analysis DoD Continuous Authorization Implementation Guide
- Govern the Least Privilege Access model across the entire development community, strictly partitioning and isolated tenant developer environments from live, production-level pipelines
- Serve as a collaborative bridge between system administrators, software engineers, cloud architects, and compliance officers to shift security left into the early design phases
- Establish goals and plans that meet project objectives.
What Required Skills You'll Bring:
- Minimum 15 years relevant experience with Masters Degree in Computer Science, Cybersecurity, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or University.
- Active DoD IAM and/or IAT Level III, Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or SecurityX
- Mastery of the Risk Management Framework (RMF) and associated federal cybersecurity standards, including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253.
- Demonstrated understanding and experience with Enterprise-level Cloud Architecture & Security principles, including control inheritance and shared responsibility models across AWS and Azure.
- DevSecOps practices, automated pipeline security (SAST, DAST, SCA), and CI/CD tools.
- Experience as SETA contractor.
- Demonstrated experience providing technical leadership on assignments.
- Active TS SCI w/Polygraph required
Security Clearance Requirement:
An active Top Secret SCI w/Polygraph security clearance is required for this position.This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.Salary Range: $157,500.00 - $283,500.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.
Skills Required
- Minimum 15 years relevant experience with a Master's degree in Computer Science, Cybersecurity, Information Assurance, Information Security System Engineering, or related discipline
- Active Top Secret SCI with Polygraph security clearance
- Active DoD IAM and/or IAT Level III, CISM, CISSP, or SecurityX
- Mastery of RMF and federal cybersecurity standards (NIST SP 800-37, NIST SP 800-53, CNSSI 1253)
- Demonstrated Enterprise-level cloud security experience, including control inheritance and shared responsibility models for AWS and Azure
- Expertise in DevSecOps practices and automated pipeline security (SAST, DAST, SCA) and CI/CD tools
- Experience validating and hardening Infrastructure as Code (Terraform scripts, Helm charts, cloud-native templates) against DISA STIGs and NIST baselines
- Experience enforcing software supply chain security (SBOM, automated container scanning, open-source dependency tracking, signature validation, SLSA compliance)
- Experience as a SETA contractor and demonstrated technical leadership on assignments
Parsons Corporation Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Parsons Corporation and has not been reviewed or approved by Parsons Corporation.
-
Retirement Support — Retirement programs are framed as a major value driver, with an ESOP alongside a 401(k) match and additional stock-purchase options contributing meaningfully to total rewards. This structure is positioned as especially attractive for employees who value long-term wealth-building over immediate cash.
-
Healthcare Strength — Health coverage is described as broad and choice-rich, with multiple plan types (PPO, HDHP, and some HMO networks) plus dental, vision, EAP, and wellness resources. The availability of different plan designs and national-carrier coverage supports varied employee needs.
-
Leave & Time Off Breadth — Time-off offerings are portrayed as competitive, including PTO, holidays, flexible schedules such as a 9/80 option for eligible roles, and floating holidays in the U.S. Paid parental leave of 160 hours is also highlighted as a meaningful component of the overall package.
Parsons Corporation Insights
What We Do
Parsons is a digitally enabled solutions provider with a focus on making the world safer, smarter, healthier, more sustainable, and more connected. Founded in 1944, Parsons primarily serves the defense, security, and infrastructure markets. Uniquely qualified to deliver cyber/converged security, technology-based intellectual property, and other innovative services, the corporation delivers state-of-the-art solutions to federal, regional, and local government agencies as well as to private industrial customers worldwide. Parsons has a reputation for inclusion and diversity and has been named to the Ethisphere Institute’s list of World’s Most Ethical Companies for 10 consecutive years. Parsons facilitates a culture of innovation by encouraging collaboration among its employees and providing opportunities for career growth. With offices around the globe, people of varied talents and backgrounds, and a wide range of exciting projects, the possibilities at Parsons are endless. For more about Parsons, visit www.parsons.com. Mission: Delivering innovative infrastructure, defense, and security solutions to enable a more sustainable, safer, smarter, and more connected world.
