Mid Cybersecurity Incident Analyst

Everforth ECS is seeking a Mid Cybersecurity Incident Analyst for a hybrid, contract-award contingent role supporting CISA’s TESS program and directly supporting JCDC Operations. The position focuses on deep technical incident analysis across IT, OT/ICS, cloud, and AI environments, with an emphasis on practical guidance for vulnerability mitigation and detection.

Responsibilities

• Conduct analysis of active cyber incidents, events, and vulnerabilities to provide guidance and targeted mitigation recommendations.
• Assist in producing written guidance and recommendations to support JCDC partners in addressing active and ongoing cyber vulnerabilities.
• Monitor emerging technologies and cybersecurity trends, applying that knowledge to improve threat detection and mitigation efforts.
• Perform hands-on technical analysis to identify insights into vulnerabilities, adversarial tactics, and mitigation strategies across diverse environments including IT, OT/ICS, cloud, and AI systems.
• Support mapping of technical threat insights to frameworks such as MITRE ATT&CK and other cyber frameworks.
• Help translate strategic products into clear, practical formats aligned to stakeholder needs and operational constraints, including large and small jurisdictions and critical infrastructure (CI) partners.
• Tailor vulnerability mitigation recommendations and provide contextualized examples that address implementation challenges and support rapid adoption.

Requirements

• Active Top Secret Clearance.
• US citizenship, with the ability to obtain and maintain a minimum of DHS (Suitability) EOD/ Public Trust.
• 6+ years of experience in threat intelligence, cyber security, incident response, or a closely related role.
• Strong understanding of computer and network fundamentals.
• Basic understanding of computer architecture, operating systems, vulnerabilities, encryption, or related areas of expertise.
• Experience defining data sources and writing detection rules to identify malicious behavior.
• Ability to perform in-depth research tasks with minimal support and produce written summaries that include insights and predictions based on analytical processes.
• Excellent written and oral communication skills.
• Knowledge of current cyber threats and exploits, including attack methodology and detection techniques using a broad range of security products, including COTS and open source.

Required Technologies

• MITRE ATT&CK
• COTS
• Open source

Location and Employment Context

Arlington, VA (hybrid). This is a contract-award contingent role.

Salary

USD 140,000 - 160,000 per year.

Benefits

• Salary Range: $140,000 - $160,000
• General Description of Benefits
• Benefits - Everforth ECS