Cyber Threat Management Specialist I

About the role

GuidePoint Security is growing its federal engineering team and seeking technically exceptional engineers who thrive at the intersection of federal mission and cybersecurity technology. As a Tier 1 Analyst, you will receive alerts from various sources—including SIEM, CSOC mailboxes, and direct phone calls from the central SIEM—and handle them as defined in Playbooks and SOPs. You will escalate events to Tier 2 after initial triage and provide input on leveraging Artificial Intelligence, Machine Learning, and SOAR capabilities to improve CSOC efficiency and accuracy. Work is remote, with preference given to candidates located in the Falls Church, VA area.

Responsibilities

• Identify security problems that may require mitigating controls.
• Interpret output from the SIEM, CSOC mailboxes, and phone calls to identify potential security incidents.
• Collect basic information to support analysis, such as IP address, location, and affected asset(s).
• Escalate items requiring further investigation to other members of the Threat Management team.
• Execute operational processes in support of response efforts to identified security incidents.
• Utilize AI/ML-based tools and techniques to detect anomalies, automate incident triage, and improve threat intelligence.
• Perform and analyze threat intelligence to assess risk and adapt defenses using ML-enhanced tools.
• Stay current on the latest cybersecurity trends, threat actors, and AI/ML research relevant to the field.
• Identify and support automation use cases, including the use of AI/ML to enhance SOC capabilities.
• Collaborate across Operations to provide SOC enhancement capabilities using automation and AI.

Requirements

• BA or BS in Computer Science, Information Technology, or related field, or four additional years of related experience in lieu of degree.
• One or more relevant certifications such as CEH, CISSP, CompTIA Security+, or GCIH are advantageous.
• 1+ years' experience in IT Operations.
• 1+ year experience in IT Security.
• Working knowledge of:
  • Platform Security Basics
  • Threat Lifecycle Management
  • TCP/IP
  • Incident Management
  • Control Frameworks and Risk Management techniques
• Excellent oral and written communication skills.
• Excellent interpersonal and organizational skills.
• Familiarity with the application of AI/ML techniques in cybersecurity, including automated threat detection, incident response automation, and predictive analytics. Experience evaluating the effectiveness of AI/ML solutions in a SOC environment is a plus.
• Understanding of ethical AI principles and their implications in cybersecurity.
• Familiarity with cloud security (AWS, Azure, GCP).
• Understanding and experience identifying and implementing automation use cases.
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Additional provisions:

• Must pass a client-mandated clearance process, including drug screening, criminal history check, and credit check.
• Must be a US Citizen or permanent status Green Card holder.
• Cannot have more than 6 months of travel outside the United States within the last five years (military service excluded).
• All overtime must be pre-approved in writing by the client manager or designated representative.
• Enforced dress code is business casual (e.g., collared shirt with slacks for men; no skirts above the knee for women).

Benefits

• Remote workforce primarily (U.S.-based only; some travel may be required for certain positions).
• Group Medical Insurance options:
  • Zero Deductible PPO Plan: GuidePoint pays 90% of the premium for employees and 70% for family plans.
  • High Deductible Health Plan with HSA: GuidePoint pays 100% of the employee premium and 75% for family plans, plus contributes $850 annually for employees or $1,750 for families in quarterly HSA installments.
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% for family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.