Cyber Information Systems Analyst - Senior - Tier 2/3, Threat Hunting

Qbe•Haymarket, VA

2d•Hybrid

About The Position

QBE, LLC is seeking a Cyber Information Systems Analyst - Senior - Tier 2/3, Threat Hunting to conduct advanced security analysis, incident investigation, and proactive threat hunting for NIH/OD-OIT.

Requirements

Associate degree in cybersecurity, information technology, computer science, information systems, business, communications, or a related field, or an additional two or more years of relevant experience in place of the degree requirement.
At least 8 years of relevant experience aligned to the responsibilities of this position.
Significant experience with incident analysis, threat hunting, or advanced SOC operations.
Experience analyzing endpoint, network, identity, and security telemetry.
Knowledge of attacker tactics, techniques, and procedures.
Strong investigative and analytical capabilities.
CompTIA Security+ certification.
GIAC Certified Incident Handler (GCIH) certification.
Ability to obtain and maintain the required federal background investigation, Public Trust determination, or security clearance associated with the position.

Nice To Haves

Experience in a federal SOC or cyber defense environment.
Experience with SIEM, EDR, SOAR, network security monitoring, and threat intelligence platforms.
Experience developing custom threat-hunting queries and detection logic.

Responsibilities

Perform advanced analysis and investigation of escalated cybersecurity events.
Conduct proactive threat hunting across network, endpoint, identity, and cloud telemetry.
Analyze indicators of compromise, attacker behavior, and anomalous activity.
Develop investigative hypotheses and identify previously undetected threats.
Correlate data from multiple security technologies and intelligence sources.
Support containment, eradication, and recovery during cybersecurity incidents.
Develop and refine detection logic, signatures, and analytic use cases.
Map adversary behavior to established attack frameworks.
Provide technical guidance to Tier 1 and junior analysts.
Produce detailed investigation reports and threat-hunting findings.