Lead Cyber Threat Analyst

evolverinc; Washington (District of Columbia); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health insurance

401(k)

Paid leave (PTO & parental leave)

Job summary

Evolver Federal seeks a Lead Cyber Threat Analyst to identify, analyze, and mitigate advanced threats targeting federal systems. You will head a team of analysts, collaborate with SOC and incident response, and deliver actionable intelligence to strengthen defenses against TTPs.

The role requires deep expertise in threat analysis, malware research, and adversary emulation within regulated government environments. U.S. citizenship and security clearances may be required.

Qualifications

• Bachelor's degree with extensive IT/tech leadership experience.
• CISSP and other security certifications are required or highly preferred.
• Experience with federal/regulatory environments is ideal.
• PMI PMP and ITIL 4 Foundation are recommended certifications.
• 10+ years in IT/tech, with last 5 on government contracts.
• U.S. citizen able to pass comprehensive background checks.

Responsibilities

• Lead cyber threat analysis and intelligence operations to identify threats.
• Conduct proactive threat hunting across enterprise and cloud environments.
• Analyze adversary TTPs and align detection with MITRE ATT&CK.
• Oversee malware analysis, reverse engineering, and forensics.
• Integrate threat intel into SOC workflows and detection tools.
• Leverage AI-driven detection to enhance security capabilities.
• Apply Zero Trust across detection and access control strategies.
• Implement cloud-native security to protect multi-cloud workloads.
• Prepare executive threat reports and strategic risk assessments.
• Collaborate with SOC, IR, and engineering teams to improve detection.

Skills

Threat hunting

Leadership

Mentoring

Communication

Strategic thinking

Education

Bachelor's Degree in CS/IT/Engineering

CISSP

Certified Security Analyst

Certified Ethical Hacker

PMI PMP

ITIL 4 Foundation

GIAC (GCTI/GCFA)

Master's degree (preferred)

Tools

Splunk

Elastic

Threat Intelligence Platforms

SOAR

Python

PowerShell

MITRE ATT&CK

Job description

Evolver Federal is seeking a Lead Cyber Threat Analyst to fulfil a requirement for a potential government client. The Lead Cyber Threat Analyst is responsible for identifying, analyzing, and mitigating advanced cyber threats targeting federal systems and critical infrastructure. This role focuses on proactive threat hunting, intelligence analysis, and developing strategies to detect and disrupt adversary tactics, techniques, and procedures (TTPs). The Lead Cyber Threat Analyst will lead a team of analysts, collaborate with SOC and incident response teams, and provide actionable intelligence to strengthen the organization’s cybersecurity posture. This position requires deep expertise in threat analysis, malware research, and adversary emulation within highly regulated environments.

Responsibilities:

• Lead cyber threat analysis and intelligence operations to identify emerging threats and vulnerabilities.
• Conduct proactive threat hunting across enterprise and cloud environments using advanced analytics.
• Analyze adversary TTPs and develop detection strategies aligned with MITRE ATT&CK framework.
• Oversee malware analysis, reverse engineering, and forensic investigations for complex incidents.
• Integrate threat intelligence feeds into SOC workflows and detection platforms.
• Leverage AI-driven threat detection techniques to enhance predictive and adaptive security capabilities.
• Apply Zero Trust principles across detection, response, and access control strategies to strengthen enterprise resilience.
• Implement cloud-native security solutions to safeguard workloads and data in multi-cloud environments.
• Prepare and deliver executive-level threat reports, risk assessments, and strategic recommendations.
• Collaborate with SOC, incident response, and engineering teams to enhance detection and response capabilities.
• Maintain and update threat intelligence platforms and knowledge bases.
• Support development of playbooks for threat hunting and incident response automation.
• Ensure compliance with federal cybersecurity frameworks (NIST 800-series, RMF, TIC 3.0).
• Mentor and coach junior analysts to develop technical expertise and career growth.
• Manage cross-functional SOC projects, ensuring alignment between threat analysis, incident response, and engineering teams.
• Drive process improvements and best practices across SOC operations to enhance efficiency and resilience.

Basic Qualifications:

• Bachelor's Degree in Computer Science, Information Management (IM), Information Technology, Engineering, or equivalent with 6 years of technical experience and 4 years' experience in IT Solutions at senior management
• Certified Information Systems Security Professional (CISSP)
• Certified Security Analyst, Certified Ethical Hacker, or similar certifications
• Project Management Institute (PMI) Project Management Professional (PMP) (Highly Recommended)
• Information Technology Infrastructure Library (ITIL) 4 Foundation
• 10 years of successful enterprise experience in an IT or technology-related field, with the last 5 years, on large government technical BPAs/contracts
• US Citizen with the ability to pass a comprehensive government background check

Preferred Qualifications:

• Experience managing or supporting cybersecurity operations, including SOC functions, in a federal or highly regulated environment
• Experience leading cybersecurity programs within federal civilian agencies
• Master's degree in a technical or management-related field
• GIAC (GCTI, GCFA) or AWS/Azure security certifications
• Knowledge of RMF, NIST 800-series, OMB A-130, and TIC 3.0 policies
• Experience with performance-based contracts and cross-functional team leadership
• Strong communication skills, including experience delivering executive briefings and incident communications
• Expertise in threat intelligence platforms (TIPs) and SIEM tools (Splunk, Elastic).
• Familiarity with SOAR platforms and automation for threat detection and response.
• Experience with malware reverse engineering and memory forensics.
• Strong knowledge of MITRE ATT&CK, Cyber Kill Chain, and threat modeling methodologies.
• Hands-on experience with cloud threat analysis (AWS, Azure, GCP) and container security.
• Ability to lead advanced threat hunting campaigns and mentor junior analysts.
• Understanding of nation-state threat actors and advanced persistent threats (APTs).
• Experience integrating threat intelligence into vulnerability management and risk scoring.
• Knowledge of scripting languages (Python, PowerShell) for automation and custom detection.

Evolver Federal is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver Federal not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law.

Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver Federal offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.