Incident Response Lead

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Job Description:

Parsons is looking for an experienced Incident Response Lead to guide a team performing high-impact cyber investigations and analysis in support of critical mission objectives. This role offers the opportunity to combine deep incident response expertise with leadership, mentorship, and continuous improvement in an environment where technical excellence and mission success go hand in hand.

In this role, you will lead a team responsible for conducting incident response activities, including host-based and network-based forensic analysis , identifying indicators of compromise, and correlating findings across multiple data sources to detect, investigate, and understand Advanced Persistent Threat (APT) activity . You will help ensure the team applies sound investigative tradecraft, maintains high technical standards, and evolves its methods as new tools, technologies, and threats emerge. Your leadership will directly support mission success by strengthening the team’s ability to identify and respond to sophisticated cyber threats.

This position is ideal for someone who combines deep incident response expertise with strong leadership and mentoring capability . You will work closely with a highly technical team, providing day-to-day leadership, mentorship, and support while helping team members strengthen their skills and advance their careers. You’ll also play an important role in improving processes, refining investigative workflows, and driving technical excellence across the team.

You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team.

What You’ll Be Doing

• Lead a team performing advanced incident response and cyber analysis in support of customer mission requirements

• Oversee investigations involving host-based and network-based forensic analysis

• Correlate data from multiple sources to identify, analyze, and track malicious activity, including APT behaviors and indicators

• Guide investigative efforts to determine scope, impact, root cause, and recommended response actions

• Ensure the team produces clear, accurate, and actionable reporting on findings and incident activity

• Promote incident response best practices, technical rigor, and continuous improvement across workflows and processes

• Evaluate and adopt emerging tools, technologies, and methodologies that improve incident response effectiveness

• Mentor analysts and support their technical development and career growth

• Collaborate with internal technical teams and stakeholders to strengthen mission outcomes and operational performance

What Required Skills You’ll Bring

• Active TS/SCI clearance

• GCIH or equivalent incident response certification

• Bachelors degree and 8+ years experience

• 8+ years of hands-on experience in Digital Forensics and Incident Response (DFIR) , with at least 5 years focused on network intrusion analysis, malware forensics, and memory analysis

• 3+ years in a leadership or supervisory role , responsible for leading intrusion investigations, managing incident responders, and briefing technical findings to leadership

• Demonstrated experience within the last three years analyzing advanced persistent threat (APT) activity and correlating findings from multiple data sources (e.g., host forensics, network logs, and threat intelligence)

• Strong understanding of cyber threat investigation, incident handling, and analytic tradecraft

• Ability to lead technical teams in a fast-paced cybersecurity environment

• Strong written and verbal communication skills

What Desired Skills You’ll Bring

• Experience leading incident response teams supporting Government or national security missions

• Familiarity with threat hunting, malware analysis, digital forensics, and adversary tracking

• Experience correlating data across endpoint, network, log, and forensic sources

• Proven ability to improve incident response processes, technical quality, and team performance

• Passion for mentoring and developing highly technical cybersecurity professionals

Security Clearance Requirement:

An active Top Secret SCI security clearance is required for this position.​

This position is part of our Federal Solutions team.

The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.

Salary Range: $125,100.00 - $225,200.00

We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!

Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.

We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!

Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to .

About Us

Parsons is a digitally enabled solutions provider focused on the defense, security, and infrastructure markets. With nearly 75 years of experience, Parsons is uniquely qualified to deliver cyber/converged security, technology-based intellectual property, and other innovative services to federal, regional, and local government agencies, as well as to private industrial customers worldwide.

Parsons is an equal opportunity, drug-free employer committed to diversity in the workplace. Minority/Female/Disabled/Protected Veteran/LGBTQ+.

For more about Parsons, visit parsons.com and follow us on Facebook, Twitter, LinkedIn, and YouTube.