Lead Cyber Threat Analyst

DirectViz Solutions, LLC•Washington, DC

1d•$145 - $160•Onsite

About The Position

The Lead Cyber Threat Analyst serves as the technical and operational lead for enterprise cybersecurity operations, overseeing approximately 63 systems and ensuring compliance with federal security standards. The role drives threat detection, analysis, and response strategy; leads the Computer Security Incident Response Center (CSIRC); and manages enterprise security monitoring tools within the Enterprise Security Operations Center (ESOC). The position requires expertise in cybersecurity frameworks, threat intelligence, and vulnerability management, along with leadership, analytical, and communication skills to guide analysts, coordinate incident response, and protect sensitive financial and operational systems.

Requirements

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
At least 10 years of progressive IT or technology experience, including at least 5 years within the past decade supporting large-scale federal technical contracts.
At least 7 years of cybersecurity experience, including 5 years focused on threat analysis in SOC or CSIRC environments supporting government systems.
Certified Information Systems Security Professional (CISSP) certification.
Information Technology Infrastructure Library (ITIL) 4 Foundation certification.
Strong understanding of cybersecurity frameworks and principles, including NIST 800-53, FISMA, RMF, and ISO 27001.
Proven experience with enterprise risk management, incident response, and vulnerability remediation.
Excellent analytical and problem-solving skills, with strong attention to detail.
Effective communication and interpersonal skills to collaborate across technical, executive, and federal teams.
Ability to lead multiple projects simultaneously and deliver results under tight deadlines.
Ability to maintain awareness during scheduled working hours.
Ability to sit or stand for prolonged periods at a desk and work on a computer using a mouse and keyboard.
Ability to lift up to 15 pounds.
Excellent verbal and written communication and good command of the English language.
Ability to execute tasks independently and work as part of a team.
Ability to learn and memorize routine tasks.
Strong organizational, grammar, business correspondence, and self-management skills.

Nice To Haves

GIAC Certified Intrusion Analyst (GCIA) certification.
Certified Ethical Hacker (CEH) certification.
CompTIA Cybersecurity Analyst (CySA+) certification.

Responsibilities

Lead enterprise-wide cybersecurity operations across approximately 63 systems, ensuring continuous protection and compliance with federal security standards.
Oversee daily security monitoring, analysis, and response activities within the Enterprise Security Operations Center (ESOC).
Direct 24/7 Computer Security Incident Response Center (CSIRC) operations, including incident triage, containment, and recovery.
Develop and maintain security documentation, including System Security Plans (SSPs), Privacy Impact Assessments (PIAs), and Risk Management Framework (RMF) artifacts.
Conduct annual Security Control Assessments (SCAs) and evaluate new systems and applications.
Identify, track, and remediate vulnerabilities and risks across enterprise environments.
Develop and maintain a real-time Cyber Threat Dashboard for senior leadership reporting and situational awareness.
Lead the Vulnerability Management Program, including prioritization, patching, and remediation oversight.
Monitor and analyze network traffic for potential intrusions, unauthorized activity, and anomalous behavior.
Manage security tools, threat intelligence feeds, and automation solutions supporting the ESOC mission.
Train, mentor, and provide technical guidance to cybersecurity analysts and SOC staff.
Oversee incident handling involving Personally Identifiable Information (PII), ensuring proper documentation and escalation.
Collaborate with cross-functional and government stakeholders to align operations with NIST, FISMA, and organizational security policies.
Support the protection and compliance of financial systems under the OCFO through proactive risk management.
Maintain system and application security posture, ensuring ongoing compliance and operational integrity.