Senior Cyber Incident Analyst (TS)
About The Position
Everforth ECS is seeking a Senior Cyber Incident Analyst to support the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division/Joint Cyber Defense Collaborative. The hybrid position is based in Arlington, Virginia and is contingent upon contract award. The analyst will support federal cybersecurity programs through cyber threat analysis, vulnerability management, defensive cyber operations, operational reporting, and continuous process improvement. Working across cybersecurity operations and intelligence functions, the analyst will analyze threat and vulnerability information, improve operational visibility, develop actionable reporting, enhance cybersecurity workflows, and provide technical guidance to analysts and customer stakeholders.
Requirements
- 10 or more years of experience in cybersecurity, information security, cyber operations, network defense, or a related technical discipline.
- Experience supporting cybersecurity operations in federal government or DoD environments.
- Experience in one or more of the following areas: Cyber Threat Intelligence, Vulnerability Management, Defensive Cyber Operations, Network Defense, or Security Operations.
- Experience analyzing cybersecurity information and communicating findings to technical and non-technical stakeholders.
- Experience developing cybersecurity reports, metrics, dashboards, or other analytic products.
- Knowledge of cybersecurity frameworks such as MITRE ATT&CK.
- Experience developing SOPs, workflows, or operational processes.
- Demonstrated ability to work across technical teams and customer organizations.
- Strong written and verbal communication skills.
Nice To Haves
- Active Top Secret/SCI clearance is preferred, or may be required based on customer requirements.
Responsibilities
- Support cybersecurity operations across cyber threat intelligence, vulnerability management, network defense, and defensive cyber operations.
- Analyze cybersecurity and vulnerability information to identify threats, trends, operational risks, and areas requiring further investigation.
- Develop actionable threat and vulnerability reporting for cybersecurity teams, program leadership, and federal stakeholders.
- Enrich technical cybersecurity data using internal, commercial, and government data sources.
- Develop and improve operational dashboards, metrics, analytic tools, and recurring cybersecurity reporting.
- Support network defense and security incident analysis, including analysis of network and security-event data.
- Apply frameworks such as MITRE ATT&CK to defensive cyber analysis and reporting.
- Develop and maintain SOPs, workflows, knowledge-management resources, and cybersecurity operational processes.
- Identify opportunities to automate data enrichment, reporting, and other recurring cybersecurity activities.
- Evaluate operational gaps and recommend improvements to cyber tools, processes, and workflows.
- Collaborate with technical teams, vulnerability management personnel, cybersecurity analysts, and government stakeholders.
- Provide technical mentorship and knowledge sharing to cybersecurity personnel.
- Translate complex technical information into clear, actionable recommendations for technical and non-technical audiences.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
