DCO Analyst - SME

Overview

Parsons is seeking a talented DCO Analyst - SME with a background in building, maintaining processes and training approaches for MARFORCYBER’s operational APT detection tool. You will design, implement, and optimize user adoption and education, ensuring high user proficiency and gradual system adoption metrics for multiple USMC customers.

Applicants must be able to attend occasional customer meetings in MD.

• Design role-based training curriculum for cyber analysts, threat hunters, and incident responders using APT detection tools managed by PdM MCCO on behalf of MFCC

• Develop hands-on lab exercises using realistic APT scenarios and adversary emulation

• Create quick reference guides, playbooks, and standard operating procedures

• Establish and support train-the-trainer programs for distributed training across commands

• Provide embedded support during initial operational capability (IOC) periods

• Conduct over-the-shoulder mentoring during live threat hunting operations

• Lead complex investigation walkthroughs demonstrating advanced analytical techniques

• Facilitate after-action reviews that identify training reinforcement needs

• Support operational testing and validation of new detection capabilities

• Develop use cases and detection logic for high-priority threat scenarios

• Optimize query performance and search efficiency for operational tempo

• Train analysts on statistical methods, anomaly detection, and pattern recognition

• Bridge communication between data engineers and operational analysts

• 6+ years of DCO experience in a DoD environment

• 5+ years hands-on experience with APT detection, threat hunting, or intrusion analysis

• 3+ years developing and delivering technical training for cyber operations personnel

• Demonstrated experience with SIEM, EDR, NDR, and threat intelligence platforms

• Background in operational cyber defense (e.g., SOC, DCGS-A/N, JFHQ-DODIN, etc.)

• Deep understanding of APT tactics, techniques, and procedures (e.g., MITRE ATT&CK framework)

• Proficiency with data analytics platforms, such as Splunk, ELK Stack, Chronicle, Sentinel, or similar

• Experience with threat intelligence integration and operationalization

• Knowledge of packet analysis, log correlation, and behavioral analytics

• Familiarity with scripting/query languages, such as SPL, KQL, SQL, Python

• Excellent problem-solving skills, to include analytical and troubleshooting abilities, with a strong attention to detail

• Travel 20% of the time to meet with customers and perform on-site support activities

• Active TS/SCI with Poly is required

• Experience with DoD requirements development processes

• Background supporting USCYBERCOM, Service Cyber Components, or NSA/CSS

• Prior military cyber operations experience (e.g., 17X, 1B4, CTN, 17C, etc.)

• Experience with learning management systems and training effectiveness measurement

• Knowledge of adult learning principles and instructional design

• Familiarity with Agile/SAFe methodologies for capability delivery

An active Top Secret SCI w/Polygraph security clearance is required for this position. This position is part of our Federal Solutions team. The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental.

We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation s most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now. Salary Range: $86,700.00 - $ We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!

This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled. Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.

We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!

Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to