Parsons Corporation
Application Security Control Validation Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Parsons Corporation
Parsons Corporation is a global engineering and construction firm founded in 1944, with its headquarters in Chantilly, Virginia. The company employs over 18,000 people and operates in more than 30 countries. Parsons specializes in innovative solutions for defense, intelligence, critical infrastructure, and national security markets. It has evolved from its early focus on petroleum and chemical engineering to include advanced digital technologies such as cybersecurity, smart infrastructure, and advanced analytics. The company offers a wide range of services, including planning, engineering, construction, and systems integration. Its work spans various sectors, including defense and intelligence, critical infrastructure, transportation, and energy. Notable projects include missile facilities, urban planning, and modernization of postal facilities. Parsons is committed to delivering agile and disruptive innovations to meet complex challenges across the globe.
Security at Parsons Corporation
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Parsons' security philosophy is centered on 'DevSecOps methodologies' and the implementation of 'Zero Trust architectures.' Their approach emphasizes 'automated and orchestrated analysis and modeling' to support global cybersecurity operations. The company prioritizes 'vulnerability discovery and assessment' as a core capability. Public statements regarding specific developer enablement vs. gatekeeping preferences or detailed risk-based triage philosophies are not publicly available.”
Security Team
Parsons' security organization is led by Eric Schlesinger, the Chief Information Security Officer (CISO), who oversees enterprise-wide security strategy and operations. The company is actively expanding its technical security staff, with multiple open positions for Application Security Control Validation Engineers and Senior DevSecOps Engineers. These roles require a mature understanding of DevSecOps and involve validating security controls within the application lifecycle. Information regarding the specific internal reporting line for the AppSec team (e.g., whether they report directly to the CISO or a CTO) is not publicly available.
Key Initiatives
Current initiatives at Parsons include the validation of application security controls and the integration of security into Kubernetes and AWS workflows via DevSecOps. The company is focused on 'automated and orchestrated analysis' and 'vulnerability discovery.' There is no public evidence found of a formal 'Security Champions' program, nor are there verbatim public details regarding specific vulnerability remediation SLAs or MTTR targets.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.