Senior Threat Detection & Response Engineer - Remote

ICF; Arlington (VA); Hybrid; USD 119,323 - 202,850; Full time

Job summary

ICF is seeking an experienced Senior Threat Detection & Response Engineer to support R&D of cyber analytic capabilities for federal networks. The role is primarily telework-based with occasional client or ICF facility meetings in the DC metro area.

Responsibilities include designing operational effects, evaluating options, translating requirements into software prototypes, and improving data aggregation and visualization. Requires active clearance and US citizenship.

Qualifications

• Bachelor’s degree with 12+ years or Master’s with 10+ years in IT, Cyber, Engineering, or related field.
• Experience with open-source distributed databases and big data tech (GreenPlum, Hadoop, Kafka).
• 5+ years implementing security platforms and 5+ years in advanced cyber threats, tools, techniques, and processes.

Responsibilities

• Oversee design of operational effects per Government requirements.
• Evaluate technical options for design and development.
• Translate mission requirements into software products and advanced countermeasure capabilities.
• Identify data aggregation, storage, correlation, and visualization methods.
• Advise on data prep, visualization, and analytics deployment by ICF and partners.
• Assess current cyber tool usage and potential efficiencies.
• Identify training gaps and propose improvement approaches.

Skills

Threat Hunting

Incident Response

Data Analytics

SQL

KQL

Splunk

Kibana

Python

Linux

Windows Security

Education

Bachelor's degree

Master's degree

Tools

Greenplum

Hadoop

Kafka

Databricks

Splunk

Kibana

Job description

ICF is seeking an experienced Senior Threat Detection & Response Engineer to support R&D of cyber analytic capabilities for federal networks. The role is primarily telework-based with occasional client or ICF facility meetings in the DC metro area.

Responsibilities include designing operational effects, evaluating options, translating requirements into software prototypes, and improving data aggregation and visualization. Requires active clearance and US citizenship.