Senior Threat Detection & Response Engineer Remote

ICF; Pensacola (FL); On-site; USD 119,323 - 202,850; Full time

Job summary

ICF is actively recruiting an experienced Senior Threat Detection & Response Engineer to support research and development of new cyber analytic capabilities for US networks and critical information systems.

The role is primarily telework-based with occasional meetings at client locations (Arlington, VA or Pensacola, FL) or ICF facilities in the DC metro area; requires active clearance and US citizenship.

Qualifications

• Bachelor’s degree with 12+ years or Master’s with 10+ years in IT, cyber, or related field.
• Working knowledge of GreenPlum and open-source big data tech like Hadoop and Kafka.
• 5+ years implementing high-impact security platforms in critical programs.
• 5+ years of advanced cyber threats, tools, techniques, and processes.
• 5+ years of experience with IDS/network security analysis tools.
• 5+ years analyzing PCAP and NetFlow data with current threat awareness.
• 5+ years with malware types, detection methods, and vulnerabilities.
• Experience with SQL, KQL, and other query languages.
• Experience developing dashboards (Kibana, Splunk).
• Knowledge of cybersecurity frameworks and attacker TTPs.
• Understanding ML math behind anomaly detection.
• Active high-level security clearance; U.S. citizenship required.

Responsibilities

• Oversee design of operational effects per government requirements.
• Evaluate tech options and provide informed recommendations.
• Translate mission needs into software products and prototypes.
• Identify data aggregation, storage, and visualization approaches.
• Advise on data prep, analytics, and visualization tools.
• Assess current cyber tools for efficiency gains and tool adoption.
• Capture improvement areas into future functional requirements.
• Identify training gaps and propose hands-on or online modules.
• Participate in post-engagement reviews.
• Communicate progress and challenges to leadership.

Skills

Threat hunting

Incident response

SQL

KQL

Splunk

Kibana

GreenPlum

Hadoop

Kafka

Python

Education

Bachelor's degree in IT or related field

Tools

Databricks

Linux/Unix

Windows security

SAFe

Kubernetes

Job description

ICF is actively recruiting an experienced Senior Threat Detection & Response Engineer to support research and development of new cyber analytic capabilities for US networks and critical information systems.

The role is primarily telework-based with occasional meetings at client locations (Arlington, VA or Pensacola, FL) or ICF facilities in the DC metro area; requires active clearance and US citizenship.