Lead Cyber Threat Analyst

Evolver Federal•Washington, DC

About The Position

Evolver Federal is seeking a Lead Cyber Threat Analyst to fulfil a requirement for a potential government client. The Lead Cyber Threat Analyst is responsible for identifying, analyzing, and mitigating advanced cyber threats targeting federal systems and critical infrastructure. This role focuses on proactive threat hunting, intelligence analysis, and developing strategies to detect and disrupt adversary tactics, techniques, and procedures (TTPs). The Lead Cyber Threat Analyst will lead a team of analysts, collaborate with SOC and incident response teams, and provide actionable intelligence to strengthen the organization's cybersecurity posture. This position requires deep expertise in threat analysis, malware research, and adversary emulation within highly regulated environments.

Requirements

Bachelor's Degree in Computer Science, Information Management (IM), Information Technology, Engineering, or equivalent with 6 years of technical experience and 4 years' experience in IT Solutions at senior management
Certified Information Systems Security Professional (CISSP)
Certified Security Analyst, Certified Ethical Hacker, or similar certifications
Project Management Institute (PMI) Project Management Professional (PMP) (Highly Recommended)
Information Technology Infrastructure Library (ITIL) 4 Foundation
10 years of successful enterprise experience in an IT or technology-related field, with the last 5 years, on large government technical BPAs/contracts
US Citizen with the ability to pass a comprehensive government background check

Nice To Haves

Experience managing or supporting cybersecurity operations, including SOC functions, in a federal or highly regulated environment
Experience leading cybersecurity programs within federal civilian agencies
Master's degree in a technical or management-related field
GIAC (GCTI, GCFA) or AWS/Azure security certifications
Knowledge of RMF, NIST 800-series, OMB A-130, and TIC 3.0 policies
Experience with performance-based contracts and cross-functional team leadership
Strong communication skills, including experience delivering executive briefings and incident communications
Expertise in threat intelligence platforms (TIPs) and SIEM tools (Splunk, Elastic).
Familiarity with SOAR platforms and automation for threat detection and response.
Experience with malware reverse engineering and memory forensics.
Strong knowledge of MITRE ATT&CK, Cyber Kill Chain, and threat modeling methodologies.
Hands-on experience with cloud threat analysis (AWS, Azure, GCP) and container security.
Ability to lead advanced threat hunting campaigns and mentor junior analysts.
Understanding of nation-state threat actors and advanced persistent threats (APTs).
Experience integrating threat intelligence into vulnerability management and risk scoring.
Knowledge of scripting languages (Python, PowerShell) for automation and custom detection.

Responsibilities

Lead cyber threat analysis and intelligence operations to identify emerging threats and vulnerabilities.
Conduct proactive threat hunting across enterprise and cloud environments using advanced analytics.
Analyze adversary TTPs and develop detection strategies aligned with MITRE ATT&CK framework.
Oversee malware analysis, reverse engineering, and forensic investigations for complex incidents.
Integrate threat intelligence feeds into SOC workflows and detection platforms.
Leverage AI-driven threat detection techniques to enhance predictive and adaptive security capabilities.
Apply Zero Trust principles across detection, response, and access control strategies to strengthen enterprise resilience.
Implement cloud-native security solutions to safeguard workloads and data in multi-cloud environments.
Prepare and deliver executive-level threat reports, risk assessments, and strategic recommendations.
Collaborate with SOC, incident response, and engineering teams to enhance detection and response capabilities.
Maintain and update threat intelligence platforms and knowledge bases.
Support development of playbooks for threat hunting and incident response automation.
Ensure compliance with federal cybersecurity frameworks (NIST 800-series, RMF, TIC 3.0).
Mentor and coach junior analysts to develop technical expertise and career growth.
Manage cross-functional SOC projects, ensuring alignment between threat analysis, incident response, and engineering teams.
Drive process improvements and best practices across SOC operations to enhance efficiency and resilience.