> Markdown version of [/jobs/ext/3941454-ics-scada-cyber-threat-analyst-ts-sci-w-poly-required](https://www.wearedevelopers.com/jobs/ext/3941454-ics-scada-cyber-threat-analyst-ts-sci-w-poly-required). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ICS-SCADA Cyber Threat Analyst - TS/SCI w/ Poly Required

- **Company:** Parsons Corporation
- **Location:** Annapolis Junction, MD, United States
- **Experience:** Expert
- **Salary:** $157,498.0 - $283,504.0
- **Contract:** Permanent contract
- **Skills:** Communications Protocols, Cyber Security, Supervisory Control and Data Acquisition (SCADA), Pcap, Network Forensics, Packet Analyzer, Security Information and Event Management, TCP/IP, Wireshark, Snort (Software), Cyber Threat Analysis, Process Control Systems, Splunk
- **Published:** October 26, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3466899949&tx=FK3936FFF&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Active TS/SCI with Poly is required
 * Must have a Bachelor's Degree
 * 7+ years' experience working in the areas of intelligence, information security, network forensics or insider threat with focus on Industrial Control Systems/Supervisory Control and Data Acquisition (ICS/SCADA) systems.
 * Subject matter expertise understanding the unique components, protocols, and architectures of ICS/SCADA systems.
 * Ability to understand data in various formats to extract and enrich information to enhance its value.
 * Experience working with development teams to articulate requirements/enhancements to capabilities and tools.
 * Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
 * Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards.
 * Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark
 * Familiarity writing signatures in Zeek and/or Snort
 * Document findings and create detailed reports to ensure tradecraft is continually updated. Present results to technical and non-technical stakeholders.

## Description

In this role you will be focused on conducting continuous research on emerging threats and threat actor activity to identify and assess the capabilities and activities of cyber criminals and/ or foreign intelligence entities. You will work as part of a team that analyzes data and prioritizes vulnerabilities with the goal to prevent and eradicate threats to critical U.S. systems.