Senior Cyber Incident Analyst

Everforth ECS is seeking aSenior Cyber IncidentAnalystto work in our Arlington, VA office.

Job Description:

ECS is seeking talented professionals to join our successful and growing teamsupportingthe Cybersecurity and Infrastructure Security Agency's (CISA)Joint Cyber Defense Collaborative (JCDC).The JCDC is CISA's flagship initiative for uniting government, industry, and international partners to proactively defend against cyber threats.

Our ECS team is at the center of providing support to JCDC as theycontinue to plan, share, and respond to cyber threats in real timeto support the greatercyber community,and we are looking to grow our team supporting this critical mission.

We areseekinga highly skilled and experiencedSr.

CyberIncidentAnalyst to join our team.

The successful candidate willfoster collaborationand communicationwithin a teamofincident coordinators/analysts,develop and implementplaybooks/mitigation strategiessupporting cyber threats and incident management,haveexpert-levelcommunications skills that enablestakeholder and customer actions and decisionenablement.

This role requires a strong understanding of cybersecurity principles, threat intelligence, and risk management.

The ideal candidate will provideincident management support for coordination with stakeholdersand executives/government leaders,providetechnical guidance for root cause analysis,riskand mitigationstrategies and documentation of post-incident analysis/reporting.

Familiarity with knowledge management tools such as Confluence orSharePointto document workflows and communication methods.

Including alignment with industry frameworks such as MITRE ATT&CKfor incident management and cyber threat intelligencemapping,CVEand

DHS/CISA KEV

tracking.

They will also collaborate withotherteams to satisfy customer requirements and develop and implement technical solutions to advance Threat Hunting,IncidentManagement,and RiskMitigationcapabilitieswithinFCEB, SLTTand Partner communities.

Responsibilities:

Create written guidance and recommendations toassistJCDC partners with solutions for active and ongoing cyber threats.

Maintain and develop SOPs for current processes to streamline workflows.

Analyze,developand provide recommendations for process improvements to the customer.

Perform analysis on active cyber incidents,eventsand vulnerabilities to provide guidance and targeted recommendations for mitigationefforts.

Conduct threat intelligence research and analysis to stayup-to-dateon emergingtechnologies,threatsand trends.

Then apply this knowledge to develop efficient cyber risk mitigation strategies.

Oversee the translation of strategic products into clear, practical formats that are tailored to the specific needs and operational constraints of different stakeholder groups, including large and smalljurisdictionsand critical infrastructure (CI) partners.

Provide tailoredvulnerability mitigationrecommendations and contextualized examples to stakeholders to address implementation challenges and encourage rapid adoption.

US Citizenshipwiththe ability to obtain andmaintainDHS (Suitability) EOD/PublicTrustOn-site 3-5days per week in Arlington, VAActiveTop SecretClearance and SCI eligible.10+ Years ofpreviousexperience in a threat intelligence, cyber security, incident response, or similar roleAbility to expertly analyzeand produce reports onactivecyber threats, including but not limited to, phishing, malware, and ransomware attacks.

Proven understanding ofcybersecurity frameworks such asMITRE ATT&CKProven understanding of computer and network fundamentalsStrong understanding of computer architecture, operating systems, vulnerabilities, encryption, or other areas of expertiseAbility to perform in-depth research tasks and produce writtentechnicalsummaries to include insights and predictions based on an analytical processExpert level experiencewith developing, documenting, andmaintainingStandard Operating Procedures.

Excellent written and oral communication skillsAbility to develop cyber threat reporting products that address risks and mitigation strategies using both OSINT and COTS solutions.

Familiarity withAI/ML concepts andapplicationsthat support Workflow and IncidentManagementprocess improvements.

ProficiencywithConfluencefor creating, organizing,maintaining, and collaborating on technical and operational documentation.