Cyber Security Analyst, Journeyman (High Level Security Clearance Required)

ICF is seeking an experienced Cyber Security Analyst to support the research and development of new cyber analytic capabilities for protecting and defending U.S. networks and critical information systems. This role involves contributing to the understanding of cyber-attacks, vulnerabilities, and hostile cyber actor operations while experimenting and prototyping future cyber capabilities at scale. The position is hybrid-remote, requiring a minimum of two days per week on-site in Arlington, VA or Pensacola, FL.

Responsibilities

• Augment operational cyber analysts and act as a consultant for detection and/or threat hunting.
• Advise on data preparation, implementation of techniques, visualizations, and employment of analytics developed by ICF and customer partners.
• Assess current use of cyber tools by analysts and identify efficiencies through alternate tool use or adoption.
• Problem-solve by identifying potential tools/processes to support needs and translate areas of improvement into functional requirements.
• Provide ad-hoc training to cyber analyst teams on tools that enhance current processes.
• Identify technical training gaps and propose methods (e.g., hands-on, online modules) to improve tool and data usage in support of the cybersecurity mission.
• Participate in post-engagement reviews.
• Effectively communicate with leadership to ensure awareness of progress and/or challenges.

Requirements

• Bachelor’s degree in IT, Cyber, or a related field OR equivalent work experience.
• 3+ years of IT and IA security experience.
• 3+ years of Cyber Security experience (e.g., Threat Hunt, Incident Response, Investigations, Technical Reporting).
• 3+ years of experience using network security analysis/IDS tools.
• 3+ years of experience analyzing packet capture and NetFlow data with an understanding of current cyber threats and trends from multiple sources (e.g., open-source, intelligence products).
• 3+ years of experience with different types of malware, including detection methods, attack vectors, and vulnerabilities used.
• Experience developing advanced dashboards (e.g., Kibana, Splunk).
• Experience with cybersecurity frameworks and knowledge bases to identify tactics, techniques, and procedures of known actors.
• Excellent written and verbal communication skills.
• Active high-level security clearance (required due to client contract).
• U.S. Citizenship (required due to the nature of the work and contract).

Preferred Qualifications

• Interpersonal skills and the ability to communicate technical details effectively with various clients.
• Practical experience with scripting languages (e.g., Python, JavaScript).
• Experience with the Databricks Intelligence Platform.
• Experience with system vulnerability management.
• Knowledge of Linux/Unix and Windows operating systems security.
• Experience with computer programming and scripting languages.
• Experience with query languages (e.g., SQL, KQL).
• Scaled Agile Framework (SAFe) experience.
• CompTIA Security+ or higher certification.

Pay

The pay range for this full-time position is $108,476.00 - $184,409.00, based on factors such as relevant work experience, skills, certifications, geographic location, and contract provisions.