Senior Cybersecurity Analyst

Summit-Technologies,-Inc.; Washington (District of Columbia); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Summit Technologies, Inc. is seeking a Senior Cybersecurity Analyst to support our government client in Washington, DC. The role spans Security Operations Center duties, incident detection, investigation, and response across on-premises and cloud environments, with emphasis on security validation and offensive security activities.

This is a full-time, hybrid position based in Washington, DC requiring on-site three days per week. Candidates must be eligible for U.S.

Qualifications

• 5+ years in cybersecurity operations or SOC roles.
• Experience investigating and responding to incidents.
• Knowledge of NIST incident response guidance.
• Experience with network, endpoint, logs, and threat indicators.
• Experience with SIEM, EDR, email security, identity security, and threat intel.
• Strong understanding of security principles and attack methodologies.
• Ability to learn offensive security methodologies.
• Experience reproducing findings and validating vulnerabilities.
• Strong written and verbal communication skills.
• Ability to work with cross-functional teams and stakeholders.

Responsibilities

• Monitor, analyze, and respond to cybersecurity alerts using SIEM/EDR.
• Triage incidents to determine scope and containment.
• Analyze network and endpoint telemetry to identify malicious activity.
• Lead investigations involving phishing, malware, and insider threats.
• Develop incident response procedures and playbooks.
• Document incidents and track operational activities.
• Support vendor advisories and security alerts.
• Provide technical leadership and mentorship.
• Conduct authorized offensive security activities and validate remediation.
• Validate known vulnerabilities and assess impact.
• Conduct manual security assessments of apps, APIs, and services.
• Distinguish true findings from false positives and document evidence.
• Develop repeatable testing procedures and guidance.
• Collaborate with security, operations, and external assessors.
• Identify improvements to monitoring and controls.
• Research emerging threats to improve capabilities.
• Support development of offensive security and purple team activities within scope.

Skills

SOC experience

Incident response

Threat analysis

Security monitoring

Offensive security

Vulnerability validation

Technical writing

Communication skills

Analytical thinking

Independent work

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

SIEM

EDR

Threat intelligence platforms

Privileged access management

Cloud security

Job description

Summit Technologies, Inc. is seeking a Senior Cybersecurity Analyst to support our government client. In this role, you will perform advanced Security Operations functions, including cybersecurity incident detection, investigation, response, threat analysis, security monitoring across on-premises and cloud environments. The ideal candidate will have a strong background in cybersecurity operations and incident response, combined with the technical ability to conduct authorized offensive security activities, manually validate vulnerabilities, reproduce penetration testing findings, and verify remediation effectiveness.

In addition to traditional Security Operations Center (SOC) responsibilities, this position will help establish and mature the organization's security validation capabilities through repeatable testing methodologies, technical assessments, and security control validation. These capabilities may expand over time to include application security assessments, adversary emulation, and purple team activities.

This is a full-time, hybrid position based in Washington, DC, requiring on-site work three (3) days per week. Candidates must be eligible to obtain and maintain a U.S. Public Trust clearance and meet the client's applicable eligibility requirements.

Duties and Responsibilities

• Monitor, analyze, investigate, and respond to cybersecurity alerts and incidents using Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), network monitoring, email security, identity security, and other enterprise security technologies.
• Perform advanced incident triage to determine scope, impact, attack vectors, and appropriate containment, eradication, recovery, and mitigation activities.
• Analyze network traffic, endpoint telemetry, authentication events, application logs, system logs, and threat intelligence to identify malicious activity and indicators of compromise.
• Lead or support investigations involving phishing, malware, unauthorized access, insider threats, data exposure, and other cybersecurity events.
• Develop, maintain, and improve incident response procedures, investigative workflows, technical documentation, and response playbooks.
• Review, assign, document, and track cybersecurity incidents and operational activities using approved ticketing and documentation systems.
• Support investigations involving vendor advisories, security alerts, and other cybersecurity notifications affecting agency systems.
• Provide technical leadership, mentorship, and knowledge sharing to junior cybersecurity analysts.
• Conduct authorized offensive security activities, including manual vulnerability validation, reproduction of penetration testing findings, remediation verification, and security control validation.
• Perform recurring validation testing of known vulnerabilities and security deficiencies to verify exploitability, assess technical impact, and confirm remediation effectiveness.
• Conduct manual security assessments of applications, APIs, identity services, wireless technologies, and other designated systems using approved security assessment tools and methodologies.
• Distinguish confirmed vulnerabilities from false positives, configuration issues, environmental conditions, and non-exploitable findings. Document supporting technical evidence, remediation recommendations, and validation results.
• Develop repeatable testing procedures, validation methodologies, assessment documentation, and technical guidance to support recurring security validation activities.
• Collaborate with Security Operations, Patch and Vulnerability Management, application teams, infrastructure teams, system owners, and external assessors to improve the agency's overall security posture.
• Identify opportunities to improve security monitoring, detection logic, logging, defensive controls, and incident response based on findings from manual security assessments.
• Research emerging threats, vulnerabilities, and offensive security techniques to support the continuous improvement of organizational cybersecurity capabilities.
• Support the continued development of internal offensive security, application security, adversary emulation, and purple team capabilities while ensuring all activities remain within approved authorization, scope, rules of engagement, and operational safeguards.
  

Required Experience and Skills

• At least five (5) years of experience in cybersecurity operations, Security Operations Center (SOC) activities, incident response, vulnerability management, security engineering, or related cybersecurity disciplines.
• Demonstrated experience investigating, analyzing, and responding to cybersecurity incidents.
• Strong understanding of cybersecurity principles, attack methodologies, common threat vectors, and NIST incident response guidance.
• Experience analyzing network traffic, endpoint telemetry, authentication activity, application logs, system logs, and threat indicators.
• Experience with enterprise cybersecurity technologies, including SIEM, EDR, email security, identity security, privileged access management, and threat intelligence platforms.
• Working knowledge of TCP/IP, DNS, HTTP/HTTPS, authentication protocols, Windows, Linux, cloud environments, enterprise networking, and common application architectures.
• Understanding of web applications, APIs, authentication, authorization, session management, and common application security vulnerabilities.
• Ability to learn, adapt to, and effectively apply agency-approved offensive security methodologies, manual security assessment techniques, and supporting technologies.
• Experience reproducing technical findings, validating vulnerabilities, documenting repeatable testing procedures, and communicating technical results.
• Strong analytical, troubleshooting, organizational, technical writing, and communication skills.
• Ability to work independently while collaborating effectively across technical teams, application owners, and government stakeholders.

Education

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; or
• Equivalent relevant professional experience may be substituted in lieu of a degree, subject to client requirements.

Security Clearance

• Candidates must be eligible to obtain and maintain a U.S. Public Trust clearance.
• Candidates must meet the client's applicable eligibility requirements, including U.S. citizenship or qualifying Green Card status.

Summit Technologies, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable law.