Cyber Incident Analyst (Mid) - Threat Hunting & JCDC (Hybrid)

ECS Corporate Services; Arlington (VA); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Top Secret clearance

US citizenship eligible

Job summary

Everforth ECS in Arlington, VA is seeking a Mid Cyber Incident Analyst to join our hybrid team on the JCDC mission. The role focuses on deep technical analysis during incidents, identifying vulnerabilities, adversarial tactics, and mitigation strategies across IT, OT/ICS, cloud, and AI systems.

You will work with CISA teams to define data sources, write detection rules, and support threat-hunting capabilities, contributing to effective incident response and threat mitigation for federal partners.

Qualifications

• 6+ years of experience in threat intelligence, cybersecurity, incident response, or similar roles.
• Excellent written and oral communication skills.
• Strong understanding of computer and network fundamentals.
• Experience defining data sources and writing detection rules.

Responsibilities

• Perform analysis on active cyber incidents, events and vulnerabilities to provide guidance and targeted recommendations for mitigation.
• Support development of written guidance for JCDC partners on active vulnerabilities.
• Stay current with emerging cybersecurity technologies and trends to improve detection and mitigation.
• Provide insights into vulnerabilities, adversarial tactics, and mitigation strategies across IT, OT/ICS, cloud, and AI systems.
• Assist mapping cyber threats to MITRE ATT&CK and other frameworks.
• Translate strategic products into practical formats for diverse stakeholders including CI and SLTT partners.
• Tailor vulnerability mitigation recommendations and examples to address implementation challenges.

Skills

Threat intel

Incident response

Vulnerability analysis

Threat hunting

MITRE ATT&CK

Written comms

Analytical thinking

Job description

Everforth ECS in Arlington, VA is seeking a Mid Cyber Incident Analyst to join our hybrid team on the JCDC mission. The role focuses on deep technical analysis during incidents, identifying vulnerabilities, adversarial tactics, and mitigation strategies across IT, OT/ICS, cloud, and AI systems.

You will work with CISA teams to define data sources, write detection rules, and support threat-hunting capabilities, contributing to effective incident response and threat mitigation for federal partners.