Threat Emulation Lead – Senior Cybersecurity Analyst

Cybersecurity Jobs; Washington (District of Columbia); Hybrid; USD 128,000 - 138,000; Full time

Benefits offered by this job

General Benefits

Everforth ECS Benefits

Job summary

Everforth ECS seeks a Senior Cybersecurity Analyst (CYBA3) to support proactive and reactive cybersecurity missions from a hybrid setup in Washington, DC. The role requires frequent in-person work, at least three days per week onsite, with continued hybrid remote support.

You will plan and execute threat emulation activities, support team execution, and communicate results with stakeholders, while leading offensive tool development and aligning with current TTPs.

Qualifications

• Current Top-Secret Clearance required; SCI/CI-Poly possible.
• Bachelor’s degree in Cybersecurity, CS/EE/Engineering, or equivalent; 1+ year experience; Master’s with 1+ year also ok.
• 2+ years of vulnerability assessments, network mapping, and service enumeration in a DoD network environment.
• Experience with Nessus, Nmap, Tenable, Kali, Burp, Metasploit Core, and Core Impact.

Responsibilities

• Assist in design and deployment of offensive tools and techniques, including social engineering, security monitoring evasion, and custom tooling for network exploitation.
• Conduct operations mimicking known and emerging threats to validate security readiness.
• Continuously update attack techniques to emulate the latest cyber adversaries and align execution with current TTPs.
• Develop and enforce guidelines and rules of engagement for each operation, balancing realism with safety to reduce disruptions.

Skills

Top-Secret Clearance

Vulnerability Assessment

Network Mapping

Threat Emulation

Stakeholder Communication

Education

Bachelor’s degree in Cybersecurity

Master’s degree

Tools

NESSUS

Nmap

Tenable

Kali

Burp

Metasploit Core

Core Impact

Job description

Everforth ECS seeks a Senior Cybersecurity Analyst (CYBA3) to support proactive and reactive cybersecurity missions from a hybrid setup in Washington, DC. The role requires frequent in-person work, at least three days per week onsite, with continued hybrid remote support.

You will plan and execute threat emulation activities, support team execution, and communicate results with stakeholders, while leading offensive tool development and aligning with current TTPs.