Senior Cyber Incident Analyst (TS)

ECS; Arlington (VA); Hybrid; USD 160.000 - 180.000; Vollzeit

Zusammenfassung

Everforth ECS is seeking a Senior Cyber Incident Analyst (TS) to join our team in Arlington, VA on a hybrid schedule. This role supports federal cybersecurity programs through threat analysis, vulnerability management, defensive operations, and operational reporting, collaborating with government and technical teams.

You will develop actionable dashboards, apply MITRE ATT&CK techniques, and mentor junior analysts while translating complex findings into clear guidance for technical and

Qualifikationen

• Active Top Secret/SCI clearance preferred or required.
• 10+ years of experience in cybersecurity, information security, cyber operations, or related field.
• Experience in federal government or DoD environments.
• Experience in Cyber Threat Intelligence, Vulnerability Management, Defensive Cyber Operations, Network Defense, or Security Operations.
• Ability to communicate findings to both technical and non-technical audiences.
• Experience developing cybersecurity reports, metrics, dashboards, or other analytic products.
• Knowledge of MITRE ATT&CK framework.
• Experience developing SOPs, workflows, and operational processes.
• Strong cross-team collaboration and communication skills.

Aufgaben

• Support cybersecurity operations across cyber threat intelligence, vulnerability management, network defense, and defensive cyber operations.
• Analyze cybersecurity and vulnerability information to identify threats, trends, risks, and areas needing investigation.
• Develop actionable threat and vulnerability reporting for cybersecurity teams, leadership, and stakeholders.
• Enrich cybersecurity data using internal, commercial, and government sources.
• Develop and improve operational dashboards, metrics, analytic tools, and recurring reporting.
• Support network defense and security incident analysis, including analysis of network data.
• Apply MITRE ATT&CK to defensive analysis and reporting.
• Maintain SOPs, workflows, knowledge resources, and processes.
• Identify opportunities to automate data enrichment and reporting.
• Evaluate gaps and recommend improvements to tools and workflows.
• Collaborate with technical teams, vulnerability management personnel, analysts, and government stakeholders.
• Provide technical mentorship and knowledge sharing to cybersecurity personnel.
• Translate complex technical information into clear recommendations for various audiences.

Kenntnisse

Top Secret/SCI clearance

Cybersecurity expertise

DoD/government experience

Threat analysis

Reporting & dashboards

Mentoring

Cross-team collaboration

Documentation

Tools

Mandiant Advantage

Palo Alto Xpanse

ILI

XSOAR

XSIAM/XDR

Censys

Elastic

ServiceNow

Jira

Confluence

Tableau

Microsoft Excel

Jobbeschreibung

Job Description

Everforth ECS is seeking a

This position is contingent upon contract award. ECS is seeking talented professionals to join our growing team supporting the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division/Joint Cyber Defense Collaborative. This is a hybrid role.

Job Description

Everforth ECS is seeking a Senior Cyber Incident Analyst (TS) to join our team in Arlington, VA (Hybrid). This position is contingent upon contract award. ECS is seeking talented professionals to join our growing team supporting the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division/Joint Cyber Defense Collaborative. This is a hybrid role. We are seeking a Senior Cyber Incident Analyst (TS) to support federal cybersecurity programs through cyber threat analysis, vulnerability management, defensive cyber operations, operational reporting, and continuous process improvement. This position will work across cybersecurity operations and intelligence functions to analyze threat and vulnerability information, improve operational visibility, develop actionable reporting, enhance cybersecurity workflows, and provide technical guidance to analysts and customer stakeholders.

Key Responsibilities

• Support cybersecurity operations across cyber threat intelligence, vulnerability management, network defense, and defensive cyber operations.
• Analyze cybersecurity and vulnerability information to identify threats, trends, operational risks, and areas requiring additional investigation.
• Develop actionable threat and vulnerability reporting for cybersecurity teams, program leadership, and federal stakeholders.
• Enrich technical cybersecurity data using internal, commercial, and government data sources.
• Develop and improve operational dashboards, metrics, analytic tools, and recurring cybersecurity reporting.
• Support network defense and security incident analysis, including analysis of network and security-event data.
• Apply frameworks such as MITRE ATT&CK to defensive cyber analysis and reporting.
• Develop and maintain SOPs, workflows, knowledge-management resources, and cybersecurity operational processes.
• Identify opportunities to automate data enrichment, reporting, and other recurring cybersecurity activities.
• Evaluate operational gaps and recommend improvements to cyber tools, processes, and workflows.
• Collaborate with technical teams, vulnerability management personnel, cybersecurity analysts, and government stakeholders.
• Provide technical mentorship and knowledge sharing to cybersecurity personnel.
• Translate complex technical information into clear, actionable recommendations for technical and non-technical audiences.

Salary Range: $160,000 - $180,000

General Description Of Benefits

Required Skills

• Active Top Secret/SCI clearance preferred or required based on customer requirements.
• 10+ years of experience in cybersecurity, information security, cyber operations, network defense, or a related technical discipline.
• Experience supporting cybersecurity operations in federal government or DoD environments.
• Experience in one or more of the following areas: Cyber Threat Intelligence, Vulnerability Management, Defensive Cyber Operations, Network Defense, Security Operations
• Experience analyzing cybersecurity information and communicating findings to technical and non-technical stakeholders.
• Experience developing cybersecurity reports, metrics, dashboards, or other analytic products.
• Knowledge of cybersecurity frameworks such as MITRE ATT&CK.
• Experience developing SOPs, workflows, or operational processes.
• Demonstrated ability to work across technical teams and customer organizations.
• Strong written and verbal communication

Desired Skills

• Experience with Mandiant Advantage, Palo Alto Xpanse, ILI, XSOAR, XSIAM/XDR, Censys, or similar cybersecurity platforms.
• Experience with Elastic, ServiceNow, Jira, Confluence, Tableau, and Microsoft Excel.
• Experience with network traffic or packet analysis.
• Experience supporting a Cybersecurity Service Provider (CSSP), Security Operations Center, or Defensive Cyber Operations environment.
• Knowledge of cloud security concepts and environments, including AWS, Azure, or Microsoft 365.
• Experience developing automated reporting or data-enrichment processes.
• Experience mentoring or providing technical guidance to cybersecurity analysts.

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!