Cyber Threat Analyst (Tier 1)

ECS Tech Inc•Fairfax, VA

1d•$20 - $25•Onsite

About The Position

ECS is seeking a Cyber Threat Analyst 1 to work in our Fairfax, VA office. As a leading managed cybersecurity services provider, ECS delivers a highly tailored and customized offering to each customer. Our team is responsible for protecting the ECS corporate and customer networks. Our mission is broad, and our team is agile. We will leverage your unique skills to help solve customers’ challenges, such as engineering a system to address a technical hurdle, protecting customer data, or consulting on a wide range security topics. You are empowered to engage and lead across multiple groups and must have the self-sufficiency and focus to work well without constant oversight. Our Cyber Threat Analysts are responsible for investigating threats targeting ECS’ internal network and commercial customers. They support the commercial cybersecurity program during core and non-core business hours. This position requires you to work rotating shifts in a dynamic, fast-paced 24x7x365 operations environment. As a Cyber Threat Analyst, you will have mentors to help guide you through your ECS journey.

Requirements

Must be a U.S. citizenship with the ability to achieve and maintain a Secret clearance.
Must have a Bachelor's degree.
1+ years of experience in a technology-centered role or completion of a degree in Information Technology, Computer Science, Cybersecurity, or a related field.
Basic Knowledge of cybersecurity principles, threat detection, and SOC operations.
Basic understanding of networking concepts.
Strong problem-solving, troubleshooting, and decision-making skills, with the ability to make sound judgments.
Demonstrated commitment to high standards of ethics, regulatory compliance, customer service, and business integrity.
Ability to support on-site travel to ECS offices or customer locations within the U.S. or OCONUS (short-term, planned travel).

Responsibilities

Conduct network monitoring and intrusion detection analysis using defense tools, including IDS/IPS, firewalls, and host-based security systems.
Analyze security events in a SIEM environment to correlate and identify indicators of potential threat activity.
Research emerging cyber threats and vulnerabilities to aid in the identification and response to incidents.
Perform log-based and endpoint-based threat detection to identify and defend against potential security threats across multiple sources.
Correlate network, cloud, and endpoint activities to identify unauthorized access or attacks.
Review alerts from security sensors, documenting technical details and incident reports for further investigation.
Assess and resolve phishing email submissions from clients, identifying malicious content and recommending mitigation actions.
Collaborate with threat intelligence and threat-hunting teams, maintaining awareness of updated threat intelligence sources and methodologies.
Support investigations for both minor and significant cybersecurity incidents, assisting in containment and analysis efforts.
Communicate security incidents and findings to both internal teams and external customers, as needed.