Junior PenTest Vulnerability Analyst

About the Role

The position supports mission‑critical security operations by overseeing toolkits used for vulnerability assessments of networks, hosts, and web applications. Travel up to 25% (approximately one week per month) may be required, primarily to CONUS sites. • Conduct vulnerability assessments of networks, hosts, and web applications using tools such as Tenable Nessus, NMAP, Wireshark, Rapid7 Metasploit, and Burp Suite • Collaborate with the Security Control Assessor to perform IT security assessments supporting the Risk Management Framework • Maintain and update assessment toolkits on Ubuntu and Kali platforms • Prepare detailed assessment reports that identify findings and recommend remediation strategies • Research vendor advisories, vulnerability reports, changelogs, and exploit data to triage vulnerabilities • Communicate findings to system owners, administrators, and program management; participate in briefings and coordination meetings

Key Responsibilities

• ▸vulnerability scanning
• ▸security assessment
• ▸toolkit maintenance
• ▸vulnerability research
• ▸report preparation
• ▸stakeholder communication

What You Bring

Candidates must possess a current Top Secret/SCI clearance with a CI polygraph and an active IAT 8570 Level 1 credential such as Security+. A bachelor's degree in a relevant field is required, though equivalent experience (e.g., associate degree with 3 years or high‑school with 5 years) is acceptable. Required knowledge includes network security architecture, RMF 800‑53 technical controls, system and application threats, penetration‑testing principles, and CVSS scoring. Desired experience includes evaluating systems to improve security posture, conducting penetration tests across various operating systems and virtualization platforms, and using industry‑standard tools such as NMAP, Nessus, Metasploit, and Wireshark. Strong problem‑solving and critical‑thinking skills are essential for diagnosing technical issues. • Hold an active IAT 8570 Level 1 certification (e.g., Security+) and an active TS/SCI clearance with CI polygraph • Possess a bachelor's degree in a relevant field or equivalent experience (AS + 3 years or high‑school + 5 years) • Demonstrate knowledge of network security architecture, RMF 800‑53 technical controls, TCP/IP, OSI model, and CVSS scoring • Show strong problem‑solving and critical‑thinking abilities for diagnosing technical issues • Experience evaluating systems and recommending improvements to security posture • Proficiency with penetration testing, system and network configuration, and virtualization platforms • Hands‑on experience using industry‑standard vulnerability assessment tools such as NMAP, Nessus, Metasploit, and Wireshark

Requirements

• ▸security+
• ▸ts/sci
• ▸bachelor's
• ▸rmf 800‑53
• ▸penetration testing
• ▸problem solving

Benefits

Parsons offers a salary range of $86,700 to $151,700 and a comprehensive benefits package that includes medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays. The company is an equal‑opportunity employer committed to employee wellbeing and continuous growth. • Salary range $86,700 – $151,700 with comprehensive benefits including medical, dental, vision, PTO, 401(k), life insurance, and flexible schedules

Work Environment

Onsite