{"id":3357242,"url":"https://alion.io/job/parsons-cyber-threat-operations-intelligence-analyst","title":"Cyber Threat Operations & Intelligence Analyst","company":{"id":4937,"name":"Parsons","domain":"parsons.com","url":"https://alion.io/company/parsons","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":340,"ghost_share":0,"stale_share":0.985,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Operations","role_family":"Operations","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Annapolis Junction, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":133000,"max_usd":252000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":619},"experience_years_min":14,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false},{"name":"Snort","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Wireshark","optional":false},{"name":"Zeek","optional":false}],"status":"live","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-30T12:48:25Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"In a world of possibilities, pursue one with endless opportunities. Imagine Next!At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.Job Description:\nParsons is looking for a talented Threat Operations and Intelligence Cyber Analyst to join our growing team!\nIn this role you will serve as a subject matter expert with deep domain knowledge in specific threat areas of interest across the globe. You will be responsible for analyzing, correlating, and operationalizing threat intelligence to support proactive defensive cyber activities. This role requires strong analytical skills with an IC mission background, technical expertise, and the ability to communicate complex findings to diverse audiences. You will work in close collaboration with a team of cyber analysts to pinpoint the highest levels of persistent cyber threats with the common goal to prevent and eradicate threats to critical U.S. systems.\nWhat Required Skills You'll Bring:\nActive TS/SCI security clearance with polygraph\n\nBachelor’s Degree in computer science, information systems, network forensics or other data analysis roles.\n\n14+ years of experience working in the areas of intelligence, information security, network forensics, insider threat or security operations.\n\nSpecific understanding of key global areas of interest that pose threats to U.S. critical systems as well as an understanding of Advanced Persistent Threats (APTs), cyber actor motives and actions in depth.\n\nExperience with reporting and IC analyst knowledge resources.\n\nExperience with Elastic/Splunk or other Security Information and Event Management (SIEM) as well as experience creating visualizations and dashboards.\n\nExceptional ability to analyze, correlate, and synthesize threat data from diverse sources.\n\nAbility to work with development teams and articulate requirements/enhancements to capabilities and tools.\n\nAbility to perform log file analysis including creating threat intelligence reports that indicate findings, mitigations, and confidence.\n\nVast experience fanning advanced analytics, network diagrams, and other forms of associated knowledge to further understand systems, networks, environments, and adversaries.\n\nExperience working with IC mission cybersecurity analysts on understanding the adversary and developing mission specific TTPs.\n\nExperience with XKS creating general queries, fingerprinting, and identifying atypical events.\n\nUnderstanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark\n\nFamiliarity writing signatures in Zeek and/or Snort\n\n Security Clearance Requirement:\nAn active Top Secret SCI w/Polygraph security clearance is required for this position.This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.Salary Range: $157,500.00 - $283,500.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest-APPLY TODAY!Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.","description_format":"text","description_chars":4561,"description_truncated":false,"requirements":{"experience_years_min":14,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Flexible schedule","Growth opportunities","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["C4ISR","Civil & Structural Engineering","Homeland Security","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-27T20:17:23Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 1","filings_12m":1,"filings_prev_12m":1,"green_card_filings_12m":1,"median_offered_wage_usd":167500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.627,"p_room":1,"age_days":4,"expected_fill_days":17,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/parsons-cyber-threat-operations-intelligence-analyst","json_url":"https://alion.io/job/parsons-cyber-threat-operations-intelligence-analyst.json","meta":{"generated_at":"2026-10-30T17:22:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5845,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4937},"rest":"https://alion.io/mcp/rest/get_company?id=4937"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fparsons-cyber-threat-operations-intelligence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fparsons-cyber-threat-operations-intelligence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fparsons-cyber-threat-operations-intelligence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/parsons-cyber-threat-operations-intelligence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fparsons-cyber-threat-operations-intelligence-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3357242}},{"tool":"search_jobs","arguments":{"company":"parsons.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3357242},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}