Hybrid Cyber Incident Analyst (Top Secret)

ECS; Arlington (VA); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Everforth ECS is seeking a Mid Cyber Incident Analyst to join our growing team in Arlington, VA (Hybrid). You will provide deep technical analysis during active cyber incidents across IT, OT/ICS, cloud, and AI systems, coordinating with CISA's VM and TH teams and supporting JCDC operations.

The role requires a Top Secret clearance and US citizenship. Responsibilities include identifying vulnerabilities, adversarial tactics, and mitigations; defining data sources and detection rules; and

Qualifications

• Active Top Secret Clearance required.
• US citizenship with ability to obtain DHS suitability.
• 6+ years in threat intel, cybersecurity, incident response or similar.
• Strong computer and network fundamentals.
• Understanding of vulnerabilities, architectures, OS, and encryption.
• Experience defining data sources and writing detection rules for malicious activity.
• Ability to perform in-depth research and produce written insights.
• Excellent written and oral communication skills.
• Knowledge of current cyber threats, exploits and detection techniques.

Responsibilities

• Perform analysis on active cyber incidents, events and vulnerabilities to guide mitigation.
• Develop written guidance for JCDC partners on active vulnerabilities.
• Stay updated on cyber tech trends to improve detection and mitigation.
• Provide insights across IT, OT/ICS, cloud, and AI systems.
• Map cyber threats to MITRE ATT&CK and other frameworks.
• Translate strategic products into clear formats for diverse stakeholders.
• Tailor vulnerability mitigation recommendations for varied audiences.

Skills

Top Secret clearance

US Citizenship

6+ years experience

Cybersecurity fundamentals

Threat hunting/detection

strong written/oral communication

threat intelligence concepts

MITRE ATT&CK knowledge

Linux/Windows familiarity

AI/ML in security

Job description

Everforth ECS is seeking a Mid Cyber Incident Analyst to join our growing team in Arlington, VA (Hybrid). You will provide deep technical analysis during active cyber incidents across IT, OT/ICS, cloud, and AI systems, coordinating with CISA's VM and TH teams and supporting JCDC operations.

The role requires a Top Secret clearance and US citizenship. Responsibilities include identifying vulnerabilities, adversarial tactics, and mitigations; defining data sources and detection rules; and