Cybersecurity Threat Analyst

Invictus International; Alexandria (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Invictus International is seeking a threat hunter to join our security operations team in a DoD/IC environment. Candidates will analyze telemetry, correlate data across sources, and document findings to support incident response and ongoing defenses.

The role requires a TS/SCI clearance with CI polygraph eligibility, a technical degree or equivalent experience, and DoD/IAT II or IAM II certifications. On-site in Virginia, Alexandria area.

Qualifications

• Bachelor's degree from an accredited institute in a technical discipline; an additional 4 years may substitute for a degree
• Minimum two (2) years of relevant experience in addition to education level
• Foundational knowledge of common cyber threats, indicators of compromise, network/host artifacts, and security monitoring concepts
• Familiarity with SIEM/search technologies, threat intelligence, MITRE ATT&CK, or security data analysis is desired
• Ability to document analytical reasoning and communicate findings clearly
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment desired
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Responsibilities

• Support proactive threat analysis and hunt activities using established hypotheses, queries, procedures, and data sources
• Proactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automated security controls
• Assess and correlate data from multiple sources, including network, endpoint, identity, SIEM, threat intelligence, vulnerability, and other available security data
• Document hunt activity, findings, evidence, and recommended follow-on actions in authorized systems and initiate or support incident-response processes when malicious activity is identified
• Provide relevant findings and trends for SOC operational reporting, significant-activity reporting, and defensive awareness
• Research indicators, adversary behaviors, and suspicious activity under guidance from senior threat personnel.
• Maintain clear hunt notes and document negative as well as positive findings to support repeatability and knowledge development
• Escalate suspicious activity and potential detection gaps to senior threat analysts and watch operations

Skills

Threat hunting

SIEM

MITRE ATT&CK

Threat intelligence

Documentation

Communication

Education

Bachelor's degree in technical discipline

Tools

SIEM/Search technologies

Threat intelligence platforms

Job description

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

• Support proactive threat analysis and hunt activities using established hypotheses, queries, procedures, and data sources
• Proactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automated security controls
• Assess and correlate data from multiple sources, including network, endpoint, identity, SIEM, threat intelligence, vulnerability, and other available security data
• Document hunt activity, findings, evidence, and recommended follow-on actions in authorized systems and initiate or support incident-response processes when malicious activity is identified
• Provide relevant findings and trends for SOC operational reporting, significant-activity reporting, and defensive awareness
• Research indicators, adversary behaviors, and suspicious activity under guidance from senior threat personnel.
• Maintain clear hunt notes and document negative as well as positive findings to support repeatability and knowledge development
• Escalate suspicious activity and potential detection gaps to senior threat analysts and watch operations

Requirements:

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree
• Minimum two (2) years of relevant experience in addition to education level
• Foundational knowledge of common cyber threats, indicators of compromise, network/host artifacts, and security monitoring concepts
• Familiarity with SIEM/search technologies, threat intelligence, MITRE ATT&CK, or security data analysis is desired
• Ability to document analytical reasoning and communicate findings clearly
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment desired
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled

Helping all candidates find great careers is our goal. The information you provide here is secure and confidential.