Incident Manager III

ARSIEM • Arlington, VA

26d • Onsite

About The Position

ARSIEM Corporation is seeking a Senior JCDC Cyber Triage Analyst to serve as a technical subject-matter expert within the JCDC triage function. The role handles complex threat-intelligence assessments, mentors junior analysts, and acts as a technical liaison to interagency partners. It combines advanced technical analysis with strategic thinking and partnership coordination to ensure high-quality threat assessments inform national cyber defense priorities. The position supports a government client in Arlington, Virginia.

Requirements

• Bachelor’s degree in a technical discipline from an accredited college or university, such as Computer Science, Cybersecurity, or Computer Engineering, or a high school diploma and at least 7 years of directly relevant technical experience.
• 5–7 years of progressive experience in threat intelligence, SOC operations, or cyber incident response.
• Demonstrated expertise in malware analysis, threat actor attribution, and cyber campaign analysis.
• Advanced proficiency with threat intelligence platforms, SIEM tools, and analytical frameworks.
• Deep knowledge of the MITRE ATT&CK framework and intelligence-driven cyber defense concepts.
• Proven track record coordinating with federal agencies and managing complex stakeholder relationships.
• Strong understanding of critical infrastructure interdependencies and sector-specific threats.
• Exceptional analytical writing skills and ability to communicate complex technical findings to diverse audiences.
• Experience briefing technical and non-technical audiences, including senior leadership.
• Ability to work collaboratively across physical locations.
• Active TS/SCI clearance and ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability.

Nice To Haves

• Master’s degree.
• Prior experience in federal government cybersecurity roles, such as CISA, FBI, NSA, or DoD.
• Experience with the CISA NCISS National Cyber Incident Scoring System to prioritize and triage incidents.
• Knowledge of general attack stages, including footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks.
• Demonstrated experience recognizing and categorizing vulnerabilities and associated attacks.
• Knowledge of Computer Network Defense policies, procedures, and regulations.
• Knowledge of operational threat environments, including first-generation, second-generation, and third-generation threats.
• Knowledge of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channels, replay, return-oriented attacks, and malicious code.
• Published threat intelligence research or contributions to the open-source security community.
• Experience with threat hunting and proactive threat detection methodologies.
• Knowledge of foreign adversary cyber capabilities and the geopolitical threat landscape.
• Familiarity with the Privacy Act and information-handling requirements for government operations.
• CISSP, GCTI, GCFA, GREM, or similar advanced certifications.

Responsibilities

• Conduct advanced triage and analysis of complex, high-severity cyber threat intelligence and IOC packages.
• Serve as the technical escalation point for challenging or ambiguous threat assessments requiring deep expertise.
• Perform sophisticated IOC enrichment using classified and unclassified intelligence sources.
• Coordinate directly with FBI, NSA, USCYBERCOM, and other interagency partners on joint threat assessments.
• Provide technical mentorship and training to mid-level and junior triage analysts.
• Develop and refine analytical tradecraft, triage playbooks, and decision matrices.
• Lead special projects to enhance triage processes, automation, and threat detection capabilities.
• Author detailed threat assessments and intelligence briefs for JCDC leadership and partner organizations.
• Represent the triage team in interagency working groups and information-sharing forums.
• Identify patterns across multiple threat reports to detect emerging campaigns or threat actor activity.
• Conduct quality reviews of analyst products and provide constructive feedback.
• Support an after-hours on-call rotation for critical incidents requiring senior-level triage assessment.
• Contribute to strategic planning for JCDC operational capability development.
• Interface with critical infrastructure sector partners to understand threat concerns and provide tailored analysis.

Benefits

• A $3,500 candidate referral bonus for a referred applicant who is successfully placed, payable after the referred employee reaches six months of employment; eligible placements must occur within 12 months of referral.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior