cyber senior operations specialist (senior engineer – cloud security)

financial analyst

data analyst

business analyst

case manager, enterprise threat response Jobs in Washington

case manager, enterprise threat response

cyber senior operations specialist (senior engineer – cloud security) Jobs in Washington

cyber defense analyst

Leidos

<div><p><b>Description</b>
</p><p>The Leidos Digital Modernization sector is looking for a <b>Cyber Fusion Analyst </b>to support a Defensive Cyber Operations (DCO) team in Washington, DC. <b>This position is expected to become available in Summer 2026.</b></p><p></p><p>
Our Cyber Fusion<b> </b>team provides mission-critical support to the customer&rsquo;s mission of protecting federal networked systems by integrating disparate intelligence, hunting telemetry, and vulnerability data into a single operational view. We bridge the gap between &quot;knowing the threat&quot; and &quot;stopping the threat,&quot; ensuring that intelligence directly drives defensive actions.</p><p><br>
This hybrid position is primarily on-site, with potential for up to 20% telework. While this position will primarily work during core hours (0600 &ndash; 1600), this position will be supporting a team of analysts working 24/7 rotating shifts (days, swings, nights). As such, occasional shift work or weekend work may be required to fill unexpected gaps in coverage.</p><p></p><p><b>
PRIMARY RESPONSIBILITIES:</b></p><ul><li><b>
Intelligence-Driven Defense:</b> Synthesize external threat intelligence (TTPs, IOCs) with internal hunt telemetry to develop a comprehensive understanding of the adversary's impact on the enterprise.</li><li><b>
Fusion Analysis &amp; Reporting:</b> Author high-impact &quot;Fusion Reports&quot; that blend technical forensics with strategic intelligence to brief senior leadership on trending threats and operational risks.</li><li><b>
Advanced Correlation:</b> Utilize SIEM and Threat Intelligence Platforms (TIP) to correlate global threat actor activity against internal sensor logs, identifying &quot;low and slow&quot; campaigns that span multiple mission sets.</li><li><b>
Adversary Campaign Tracking:</b> Maintain a living &quot;Adversary Encyclopedia&quot; by mapping internal discoveries to the MITRE ATT&amp;CK framework to identify systemic defensive gaps.</li><li><b>
Vulnerability-Intelligence Pairing:</b> Analyze Vulnerability Disclosure Program (VDP) data alongside active threat reporting to prioritize patching efforts based on real-world exploitation trends.</li><li><b>
Tactical Countermeasure Influence:</b> Provide data-backed recommendations to Engineering and DCO teams to adjust firewall rules, EDR policies, and SIEM logic based on emerging fusion findings.</li><li><b>
Indications &amp; Warnings (I&amp;W):</b> Develop and refine custom analytics that provide &quot;early warning&quot; of adversary reconnaissance or pre-exploitation activity targeting the customer enterprise.</li><li><b>
Continuous Knowledge Management:</b> Maintain the &quot;Single Source of Truth&quot; for threat data, ensuring that Hunt, Intel, and Engineering teams are operating from a synchronized set of prioritized threats.</li></ul><p></p><p><b>
BASIC QUALIFICATIONS:</b></p><ul><li>
Bachelor&rsquo;s Degree with 8+ yrs of experience or Master&rsquo;s Degree with 6+ yrs of relevant experience; additional years of experience may be substituted in lieu of degrees.</li><li><b>
DoD 8570 IAT Level II/III:</b> Must hold a certification such as CompTIA Security+, CASP+ CE, or CISSP.</li><li><b>
DoD 8570 CSSP Analyst:</b> Must hold a CSSP Analyst certification (e.g., CEH, CySA+) or obtain within 180 days.</li><li>
Analytic Writing Mastery: Demonstrated ability to synthesize complex technical data into concise, non-technical executive briefings.</li><li>
Framework Proficiency: Expert understanding of the Cyber Kill Chain, Diamond Model, and MITRE ATT&amp;CK.</li><li><b>
Security Clearance:</b> <b>Current DoD TS/SCI security clearance </b>and ability to pass<b> additional customer suitability screenings </b>prior to start and maintain throughout employment<b>.</b></li></ul><p></p><p><b>
PREFERRED SKILLS:</b></p><ul><li>
Fusion Center Experience: Previous experience working within a government or large-scale commercial Cyber Fusion Center (CFC) or Joint Operations Center (JOC).</li><li>
Query &amp; Scripting: Proficiency in SPL (Splunk) or KQL (Kusto) for data correlation; Python skills for automating intelligence ingestion and enrichment.</li><li>
OSINT &amp; Commercial Portals: Experience utilizing tools like Recorded Future, VirusTotal, or Mandiant Advantage to pivot from external indicators to internal threats.</li><li>
Cloud Fusion: Familiarity with fusion analysis within AWS, Azure, or O365 environments, specifically correlating cloud-native audit logs.</li><li>
Adversary Emulation: Basic understanding of Red Teaming or Penetration Testing methodologies to better predict adversary movement.</li></ul><p></p><p>
#ms</p><p>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.</p><h2 class="jobSectionHeader"><b>
Original Posting:</b></h2>
March 12, 2026<p></p><p><br>
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.</p><p></p><h2 class="jobSectionHeader"><b><br>
Pay Range:</b></h2>
Pay Range $107,900.00 - $195,050.00<p></p><p>
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</p><p></p><p><b>
About Leidos</b></p><p></p><p>
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.</p><p></p><p><b>
Pay and Benefits</b></p><p></p><p>
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.</p><p></p><p><b>
Securing Your Data</b></p><p></p><p>
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.</p><p>
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.</p><p></p><p><b>
Commitment to Non-Discrimination</b></p><p></p><p>
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</p></div>

Cyber Fusion Analyst

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
PROGRAM OVERVIEW</b></h5><div>
Engineering, integration, and cybersecurity support to design, build, and test enhanced services for the Department of Navy's IT architecture. Offers a wide range of roles, from cybersecurity experts to engineers specializing in systems, networks, software, and data center services.</div></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking a NOSC Analyst to support our customer onsite in Washington D.C.</div><ul><li>
Coordinate across the enterprise to ensure network security devices are being monitored and are receiving or generating alerts.</li><li>
Identify security risks and exposures, determine causes of security violations, and suggest procedures to halt future incidents and improve security.</li><li>
Perform network traffic analysis utilizing raw packet data, net flow, IDS, IPS and custom sensor output, as it pertains to the cyber security of communications networks.</li><li>
Device monitoring of tiered alerts for all operational networks.</li><li>
Maintain documentation for processes and procedures.</li><li>
Create incident reports providing both high level and in-depth details for investigations.</li><li>
Lead investigations and mentor junior analysts.</li><li>
Develop training pipeline and brown bag sessions for team cross training.</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><ul><li>
Requires a Top Secret with SCI eligibility level clearance</li><li>
Min 8 years with BS/BA; 4 years of additional relevant work experience may be considered in lieu of a Bachelors degree</li><li>
8 years of Incident Handler/Incident Response experience</li><li>
Requires ability to lead cyber investigation and brief updates to customer and team lead</li><li>
Requires current DoD 8570 IAT Level II certification (CCNA Security, CySA+, CICSP, GSEC, Security+ CE, SSCP)</li><li>
Requires current DoD 8570 CSSP-Analyst certification. (CEH, CFR, CySA+, GCIA, GCIH, GICSP, SCYBER)</li></ul><div><b>
Benefits:</b></div><div><b><i>
Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and eligibility to participate in an attractive bonus plan.</i></b></div></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

NOSC CYBER ANALYST

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is currently hiring a <b>Cyber Case Management &ndash; Mid-level Process Assurance Analyst</b> for its' Federal Strategic Cyber programs.</div><div></div><div><b><br>
Location: Arlington, VA and Washington, DC (On-Site)</b></div><div></div><div><br>
As the nation&rsquo;s risk adviser, we (CISA) help our partners strengthen their own capabilities and connect our stakeholders in industry and government to each other and to resources, analyses, and tools to help them build their own cyber, communications, and physical security and resilience, and in turn, strengthening national resilience.</div><div></div><div><b><br>
In this role, you will:</b></div><ul><li>
Lead small projects with manageable risks and resource requirements</li><li>
Interact with senior customer personnel on significant matters</li><li>
Coordinate activity across organizational lines</li><li>
Develop the overarching process of receiving, triaging, assigning, tracking, closing, and finalizing the record of reported incidents</li><li>
Draft organizational documentation such as Concept of Operations, Standard Operating Procedures, Work Instructions, etc.</li><li>
Ensure tactical implementation of the incident reporting processes, staffing, and technologies</li><li>
Identify opportunities to increase the efficacy of cyber incident report handling and workflows</li><li>
Document challenges, coordinates across teams to identify opportunities for process improvement, and recommend solutions to ensure incident reporting apparatus success</li><li>
Understand cyber, physical, and communications incident trend analysis and reporting functions</li><li>
Correlate and associate potential threat activities to inform senior decision makers</li><li>
Ensure timely and effective response to internal and external mission partners</li><li>
Validate the appropriate incident escalation and reporting procedures</li><li>
Seek to improve the quality, productivity, and sharing of information pertaining to the incident reporting life cycle</li></ul><div><b>
Duties may also include but are not limited to:</b></div><ul><li>
Act as a resource for colleagues with less experience</li><li>
Identify, log, categorize, perform initial triage, routing, and resolving incidents and requests</li><li>
Manage the lifecycle of incident and request tickets in accordance with interface agreements</li><li>
Performing customer relationship management activities with mission partners</li><li>
Perform internal coordination and follow up for distributed actions</li><li>
A willingness to learn new tools and technologies and take on new responsibilities as assigned</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><div><b>
Basic Requirements:</b></div><ul><li>
BS/BA with 5 years of related experience. An additional 4 years of experience may be considered in lieu of degree.</li><li>
In-depth conceptual and practical knowledge in job discipline and basic knowledge of related job disciplines.</li><li>
Experience leading projects or having led project steps within a broader project or have accountability for on-going activities or objectives.</li><li>
Experience in providing solutions to complex problems which require regular use of ingenuity and creativity.</li><li>
Demonstrated ability to work independently, receive minimal guidance.</li><li>
Experience with developing formal, written guidelines or instructions with operational and technical components.</li><li>
Demonstrated understanding of organizational structure and alignment to business operations.</li><li>
U.S. citizenship and an active Top Secret Security Clearance and the ability to obtain TS/SCI.</li><ul><li>
In addition, selected candidate must be able to obtain and maintain a favorably adjudicated DHS background investigation (EOD) for continued employment.</li></ul></ul><div><b>
Preferred Qualifications:</b></div><ul><li>
Security+ Certification.</li><li>
ITIL Foundation Certification.</li><li>
Minimum of 1 year supporting a WATCH Operations Center or Security Operations Center.</li><li>
Worked within a customer service-oriented environment.</li><li>
Developed business operational workflow models.</li><li>
Exceptional communication skills.</li><li>
Technical writing skills.</li><li>
Experience in using the Remedy and ServiceNow ticketing suite.</li></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

CYBER CASE MANAGEMENT – MID-LEVEL PROCESS ASSURANCE ANALYST

Bank of America

<div><p><b>Job Description:</b></p><p></p><p>
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.<br>
<br>
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates&rsquo; physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.<br>
<br>
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.<br>
<br>
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!</p><p><b><br>
Job Description:</b><br>
This job is responsible for supporting evaluations of cyber security threats and updating defensive capabilities to reduce the bank's risk of exposure. Key responsibilities include conducting analyses of the threat environment and threats to the bank, including post incident analysis, applying a multi-faceted situational awareness of cyber security processes to protect against threats, and implementing proactive defensive actions for the security, continuity, and confidentiality of information.</p><p></p><p>
What you'll do</p><ul><li>
Respond, triage, and adapt to real-time threats targeting the organization through the lens of malware delivery and execution.</li><li>
Perform static, dynamic, and behavioral analysis of malicious software and potential indicators of compromise.</li><li>
Maintain detailed documentation regarding analysis findings and producing comprehensive reports encompassing observations, actions taken, and recommendations.</li><li>
Identify cyber risks and help develop improvements to controls and detection mechanisms.</li><li>
Collaborate with response teams to defend against emerging threats and contribute to Incident Response efforts.</li></ul><p></p><p>
Who you are
</p><ul><li>We are looking for mid-level candidates with malware analysis and incident response experience.</li><li>
Specific experience with triaging detections, prioritizing threats, performing static and dynamic analysis, identifying security gaps, and implementing preventative measures.</li><li>
Candidates should have a very strong investigative mindset with an ability to drive process changes and implement control enhancements.</li><li>
Candidates typically should have 3-5 years of relevant experience in one or more threat prevention disciplines focusing on Email, Web, or Endpoint.</li></ul><p></p><p>
Required Skills</p><ul><li>
Understanding of browser exploitation techniques</li><li>
Familiarity of web based technologies such as JavaScript or HTML and how they are commonly abused by various threat actors or techniques.</li><li>
Experience with reviewing and analyzing Email Headers.</li><li>
Experience with detecting phishing and other common email threats.</li><li>
SIEM experience with event correlation and searching.</li><li>
Experience with dynamic analysis tools such as Process Monitor, FakeDNS, Regshot, or Wireshark.</li><li>
Familiarity with use and interpretation of malware analysis results from sandbox technologies.</li><li>
Technical experience and ability to operate and maintain a virtualized sandbox environment.</li><li>
Familiarity with URL categorization and analysis tools like Fiddler, commercial sandbox, or web proxy technologies.</li><li>
Ability to assess files or URLs and extract Indicators of Compromise (IoCs) such as malicious domains, IPs, and file hashes.</li><li>
Experience with documentation and ability to clearly articulate thoughts to a wide variety of intended audiences (teammates, technical, non-technical, leadership, etc.).</li><li>
Knowledge of Endpoint Detection and Response (EDR) tools</li><li>
Knowledge of forensic artifacts such as Browser, Registry, or Event Log artifacts.</li></ul><p></p><p>
Desired Skills</p><ul><li>
3+ years of experience conducting end to end Malware analysis specifically around either Email, Web, or Endpoint.</li><li>
3+ years of conducting incident response using commercial products and tools.</li><li>
3+ years of experience in digital forensics</li><li>
Knowledge of at least one major cloud services provider (AWS, GCP, Azure) technologies</li><li>
Ability to create scripts and other forms of automation</li><li>
Experience conducting interviews with an interrogative mindset</li></ul><p></p><p><b>
Skills:</b></p><ul><li>
Cyber Security</li><li>
Data Privacy and Protection</li><li>
Problem Solving</li><li>
Process Management</li><li>
Threat Analysis</li><li>
Business Acumen</li><li>
Data and Trend Analysis</li><li>
Interpret Relevant Laws, Rules, and Regulations</li><li>
Risk Analytics</li><li>
Stakeholder Management</li><li>
Access and Identity Management</li><li>
Data Governance</li><li>
Encryption</li><li>
Information Systems Management</li><li>
Technology System Assessment</li></ul><p></p><p><b>
Shift:</b></p>
1st shift (United States of America)<p></p><p><b>
Hours Per Week:</b></p>
40</div><p></p>

Malware Defense Analyst

C4ADS

<div><h2 class="jobSectionHeader"><b>Overview</b></h2>
<p>
We are looking for an Analyst to join our Human Security and Conflict Prevention Program! Our team is pioneering new approaches in using publicly available information and emerging technology to map, track, and disrupt forced labor and human trafficking, document human rights abuses, prevent atrocities, and better understand the role of advanced surveillance technology (AI, spyware, etc.) in human rights violations around the world.</p>
<p>
As an Analyst, you'll play an integral role in our success by conducting complex analysis that drives real-world impact. You will use and build data-driven methodologies to identify the networks that finance and profit from human rights abuses and pose risks to human security, and you'll work with a diverse coalition of partners from government and civil society to hold these networks accountable and develop a sustainable investigative community. You will steer the strategy and impact of our projects, and develop new ones. You'll get in-depth training and hands-on experience with advanced methods and cutting-edge tech. Your contributions will directly impact our efforts to promote peace and security worldwide, and in return, you will gain invaluable experience and skills in a supportive and mission-driven environment, complete with competitive benefits and flexible working conditions.</p>
<p>
Read more about the role and requirements below. Keep in mind that even if you don't meet all the requirements, we're looking for people who have a demonstrated willingness to build and learn new skills.</p>
<h2 class="jobSectionHeader"><b>
What You'll Do:</b></h2>
<ul><li>Learn and apply advanced investigative methods to conduct detailed analysis to map, track, and disrupt forced labor and human trafficking, document human rights abuses, prevent atrocities, and better understand the role of advanced surveillance technology in human rights violations around the world.</li>
<li>Regularly use advanced methodologies and technologies to support research and analysis, primarily leveraging supply chain, trade, and corporate data.</li>
<li>Produce a range of well-written analytic products from public reports to private dossiers for a wide audience, including civil society, law enforcement, regulatory agencies, and multinational organizations.</li>
<li>Travel around the world to meet with partners, collaborate, and conduct analytic trainings.</li>
<li>Use subject matter expertise and language skills to advance our team's analytical edge, expand our data holdings, and broaden our partner network.</li>
<li>Develop and maintain analytical relationships with external stakeholders</li>
<li>Represent C4ADS by briefing analysis externally, including to senior decision-makers, journalists, and at high-level public forums.</li>
</ul><h2 class="jobSectionHeader"><b>What We're Looking For:</b></h2>
<ul><li>Proven work experience in investigating, researching, or countering human rights abuses, illicit networks, and/or conflict</li>
<li>Exceptional oral and written communication skills</li>
<li>Proven interest or experience in using data and technology to conduct analysis or investigations with structured and unstructured data</li>
<li>Prior experience conducting research, investigations, or data analysis using non-English sources</li>
<li>Undergraduate degree in a related field, such as international relations, journalism, data science, or a foreign language</li>
<li>Dedication to our values and passion for our mission</li>
<li>Initiative, creative thinking, attention to detail, and exceptional time management</li>
<li>An aptitude for picking up new skills quickly and an eagerness to do so</li>
<li>Strong interpersonal skills and a commitment to team success</li>
<li>Willingness to travel at short notice, including to high-risk environments</li>
<li>Willingness to work on a range of human rights-related issues</li>
<li>Willingness to work in-person in DC at least two days per week</li>
</ul><h4 class="jobSectionHeader"><b>Bonus Points For:</b></h4>
<ul><li>Experience working on forced labor or human trafficking, atrocity prevention, human rights abuse (or atrocity crimes) documentation, or surveillance technology.</li>
<li>Experience in big data analysis / network analysis / data engineering / cloud computing</li>
<li>Expertise in sanctions, export controls, or due diligence</li>
<li>Expertise in supply chains and/or global finance, including supply chain/trade/corporate data</li>
<li>Proficiency in languages other than English; including Chinese, Southeast Asian language (i.e., Burmese), or French</li>
<li>Proficiency in using Python or R to create data visualizations or manipulate data</li>
</ul><h2 class="jobSectionHeader"><b>How We'll Reward You:</b></h2>
<ul><li>$65,000 salary</li>
<li>Medical, Dental, and Vision Insurance</li>
<li>Voluntary 401(k) program with 4% matching</li>
<li>Unlimited vacation and flex time that focuses on the work, not hours</li>
<li>A $4,500 education stipend to continue learning new skills and languages</li>
<li>Professional development programs that allow you to customize your own courses and build your own development path</li>
<li>A passionate team that values hard work and is serious about building and maintaining a great culture</li></ul></div>

Human Security and Conflict Prevention Analyst

Amtrak

<div><p><b>Your success is a train ride away!</b></p><p>
As we move America&rsquo;s workforce toward the future, Amtrak connects businesses and communities across the country. We employ more than 20,000 diverse, energetic professionals in a variety of career fields throughout the United States. The safety of our passengers, our employees, the public and our operating environment is our priority, and the success of our railroad is due to our employees.</p><p></p><p><b><br>
Are you ready to join our team?</b></p><p>
Our values of &lsquo;Do the Right Thing, Excel Together and Put Customers First&rsquo; are at the heart of what matters most to us, and our Core Capabilities, &lsquo;Building Trust, Accountability, Effective Communication, Customer Focus, and Proactive Safety &amp; Security&rsquo; are what every employee needs to know and do to be most impactful at Amtrak. By living the Amtrak values, focusing on our capabilities, and actively embracing and fostering diverse ideas, backgrounds, and perspectives, together we will honor our past and make Amtrak a company of the future.</p><p></p><p><br>
The <b>Principal Cyber Threat Incident Response Analyst </b>will play a critical role within the Amtrak Cyber Fusion Center. In this role, you will support a digital forensic cyber incident response team to effectively respond to and recovering from cybersecurity incidents. You will execute the cyber incident response plan, response playbooks, and will ensuring timely resolution of security breaches</p><p><b>
ESSENTIAL FUNCTIONS:</b></p><ul><li>
As a Principal Cyber Threat Incident Response Analyst, you will provide industry-leading cyber incident response supporting the Cyber Fusion Center mission to effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident</li><li>
You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment to support effective remediation, and crisis management</li><li>
In this role, you will technically navigate critical and high-profile incidents, performing digital forensic and incident response analysis with support from threat hunting, and malware triage analysts</li><li>
Support Amtrak-wide cyber incident response engagements, examine cloud, endpoint, and network-based sources of evidence</li><li>
Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations</li><li>
Build scripts, tools, or methodologies to enhance Amtrak&rsquo;s incident investigation processes</li><li>
Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations</li><li>
Support Cyber Incident Exercises, Tabletops, and Cyber Incident Management Response Team with business leaders, stakeholders, and cross-functional teams.</li><li>
Support with Crisis Management, Emergency Management, Incident Response, Legal and OIG teams to conduct and coordinate on Cyber Incident Response Activities.</li><li>
Preferred knowledge and familiarity with Operational Technology (OT), Industrial Controls Systems (ICS) or Supervisory Control and Data Acquisition (SCADA) systems but not required.</li><li>
Cybersecurity certifications, courses, or hands-on experience with some of the following:<ul><li><div><ul><li>
Advanced Threat Detection</li><li>
Hacker tools, techniques</li><li>
Penetration Testing, Exploit Writing, and Ethical Hacking</li><li>
Offensive Security, Security Operations, Web Application Testing, or Cloud Security</li><li>
Reverse-Malware Engineering</li><li>
Digital Forensics and Incident Response</li><li>
PowerShell, JavaScript and Python</li><li>
Relevant certifications including GIAC Certified Incident Handler (GCIH), Certified Incident Response Handler (GCFA) or similar</li><li>
Experience with using SIEM systems, network security tools, and log analysis tools</li><li>
Experience with cyber incident response</li><li>
Experience with Mitre ATT&amp;CK framework</li><li>
Experience with threat intelligence, vulnerability management, and security incident response</li></ul></div></li></ul></li><li>
Regularly participate in tabletop exercises designed to identify gaps, improve skills, enhance communication, and engage with stakeholders.</li><li>
Review technical reports from vulnerability and penetration testing assessments, as well as results from tabletop exercise to identify potential future incidents.</li><li>
Develop, refine, recommend, and maintain playbooks, policies, and procedures to ensure alignment to industry best practices.</li></ul><p><b>
MINIMUM QUALIFICATIONS:</b></p><ul><li>
Bachelor&rsquo;s degree in computer science, Information Systems, Cybersecurity, or related technical field plus 7-10 years of relevant experience is required.</li></ul><p><b>
Experience on one or the combination of the below to satisfy education and experience requirements:</b></p><ul><li><div><ul><li><div><ul><li>
Incident Response</li><li>
Vulnerability Management</li><li>
Digital Forensics</li><li>
Network or Cloud Security</li><li>
Penetration Testing</li></ul></div></li></ul></div></li></ul><p><b>
One incident response centric certification:</b></p><ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li></ul></div></li></ul></div></li></ul><p><b>
In depth understanding of threats, vulnerabilities and principals of incident response and chain of custody.</b></p><ul><li>
Hands on experience with forensics tools and log correlation.</li><li>
Ability to think like an attacker and hunt within the security tool stack.</li><li>
Ability to incorporate the MITRE ATT&amp;CK Framework in everyday processes.</li></ul><p><b>
 </b><b>PREFERRED QUALIFICATIONS:</b></p><ul><li>
Master's degree in Cybersecurity, Information Technology, Digital Forensics, Computer Science, or equivalent technical field</li><li>
10+ years of experience within the cybersecurity field</li><li>
Basic knowledge of Operation Technology (OT), SCADA, HVAC and/or IoT</li></ul><p><b>
Two or more incident response centric certifications:</b></p><ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li></ul></div></li></ul></div></li></ul><p><b>
WORK ENVIRONMENT:</b></p><ul><li>
Amtrak offers several options for a working environment including 100% remote, on-site, and/or a hybrid schedule.</li><li>
This is a position that requires off-hours work and on-call participation.</li><li>
Please note your headquarters office may be in any one of Amtrak&rsquo;s locations across the United States. The ability and willingness to travel up to 30% to other office locations is required.</li></ul><p><b>
COMMUNICATIONS AND INTERPERSONAL SKILLS:</b><br>
Must have excellent oral and written communication skills.</p><p>
The salary/hourly range is $124,600-$161,352, Pay is based on several factors including but not limited to education, work experience, certifications, internal equity, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position and/or long-term incentive plan compensation. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.</p><p>
The salary/hourly range is $124,600.00 &ndash; $161,352.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.</p><p></p><p><b><br>
Requisition ID:</b>166157</p><p><b>
Work Arrangement:</b>06-Onsite 4/5 Days Click here for more information about work arrangements at Amtrak.
<br>
<b>Relocation Offered:</b>No
<br>
<b>Travel Requirements:</b>Up to 25%</p><p><b>
You power our progress through your performance.</b></p><p>
We want your work at Amtrak to be more than a job. We want your career at Amtrak to be a fulfilling experience where you find challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. Amtrak maintains a culture that values high performance and recognizes individual employee contributions.</p><p><br>
Amtrak is committed to a safe workplace free of drugs and alcohol. All Amtrak positions requires a pre-employment background check that includes prior employment verification, a criminal history check and a pre-employment drug screen.</p><p>
Candidates who test positive for marijuana will be disqualified, regardless of any state or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. Amtrak's pre-employment drug testing program is administered in accordance with DOT regulations and applicable law.</p><p><br>
In accordance with DOT regulations (49 CFR &sect; 40.25), Amtrak is required to obtain prior drug and alcohol testing records for applicants/employees intending to perform safety-sensitive duties for covered Department of Transportation positions. If an applicant/employee refuses to provide written consent for Amtrak to obtain these records, the individual will not be permitted to perform safety-sensitive functions.</p><p></p><p><br>
In accordance with federal law governing security checks of covered individuals for providers of public transportation (Title 6 U.S.C. &sect;1143), Amtrak is required to screen applicants for any permanent or interim disqualifying criminal offenses.</p><p><br>
Note that any education requirement listed above may be deemed satisfied if you have an equivalent combination of education, training and experience.</p><p><br>
Amtrak is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race/color, to include traits historically associated with race, including but not limited to, hair texture and hairstyles such as braids, locks and twists, religion, sex (including pregnancy, childbirth and related conditions, such as lactation), national origin/ethnicity, disability (intellectual, mental and physical), veteran status, marital status, ancestry, sexual orientation, gender identity and gender expression, genetic information, citizenship or any other personal characteristics protected by law.</p></div>

Principal Incident Response Analyst - 90406800 - Remote

DoorDash

<p></p><div><h2 class="jobSectionHeader"><b>About the Team</b></h2>
<p>
At DoorDash, including the international brands Deliveroo and Wolt, we're building the industry's most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Security is integral to the success of the business, as we secure the data and protect the privacy of our business and various stakeholders.</p>
<p>
Our global Security team covers proactive security, cyber defense, GRC, enterprise security and physical security and safety.</p>
<p>
Our Cyber Defense team is a global team that spans the US, UK, EU and India. Our Mission is to create a secure DoorDash environment through proactive threat preparation and rapid response, leveraging automation and AI as much as we can. We are committed to protecting our people, partners, customers, and technologies with robust safeguards and unwavering vigilance.</p>
<h2 class="jobSectionHeader"><b>
About the Role</b></h2>
<p>
The Senior Manager of Cyber Defense will lead the Cyber Defense team in the US.</p>
<p>
This critical role is responsible for ensuring the organization's security posture by proactively identifying, investigating, and mitigating cybersecurity threats and incidents, as well as building AI-based automation.</p>
<p>
The Senior Manager will report to the Senior Director of Cyber Defense, who leads Cyber Defense globally, and execute on strategic plans and projects to enhance the company's security posture across all the brands. The role will be located in the US Eastern time zone to facilitate active collaboration with cyber defense leaders in the UK and EU (Deliveroo and Wolt).</p>
<h2 class="jobSectionHeader"><b>
You're excited about this opportunity because you will&hellip;</b></h2>
<ul><li>Develop and implement a roadmap for continuous improvement of the team's capabilities, to include building net new functional areas. Automation and AI feature prominently.</li>
<li>Lead the response to information security incidents, including investigation of, countermeasures to, and recovery from cyber attacks, unauthorized access, and policy breaches.</li>
<li>Especially with incidents, act as the executive support for Americas timezone business and Legal, which includes participating in on-call for escalations or sometimes an incident commander role in high profile cases.</li>
<li>Define, monitor, and report key performance indicators and service level agreements for internal teams and external vendors.</li>
<li>Develop, maintain, and execute on key incident response plans and playbooks for global response.</li>
<li>Collect and analyze information security threat intelligence to proactively identify and assess threats that could impact DoorDash.</li>
<li>Hire, mentor, and train security engineers, fostering a culture of continuous learning, resilience and sustainable work, knowledge sharing, and collaboration within the Cyber Defense team.</li>
</ul><h2 class="jobSectionHeader"><b>We're excited about you because&hellip;</b></h2>
<ul><li>10+ years of experience in information security and people management. Must have experience leading Incident Response, Incident Management, Investigations and Threat Hunt functions.</li>
<li>Experience working with global partners in a follow-the-sun model.</li>
<li>Experience providing technical leadership and guidance, and thinking strategically and analytically to solve problems,</li>
<li>Excellent understanding of information security operations related frameworks and standards (e.g., MITRE ATT&amp;CK and NIST).</li>
<li>Understanding and actively following the technology surrounding large language models.</li>
<li>Excellent communication, presentation, and stakeholder management skills.</li>
<li>Led with a people-first approach, is able to facilitate a conversation rather than dictate it, and is empathetic to divergent viewpoints.</li>
</ul>
<p>We expect this position to be filled by 5/17/2026.</p><br>
<p></p>
<p>
Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only</p>
<p>
We use Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023, and resumed using Covey Scout for Inbound again on June 29, 2024.</p>
<p>
The Covey tool has been reviewed by an independent auditor. Results of the audit may be viewed here: Covey</p><div><h2 class="jobSectionHeader"><b>
About DoorDash</b></h2>
<p>
At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users&mdash;from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods.<br>
<br>
DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We're committed to supporting employees' happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more.</p>
<h2 class="jobSectionHeader"><b>
Our Commitment to Diversity and Inclusion</b></h2>
<p>
We're committed to growing and empowering a more inclusive community within our company, industry, and cities. That's why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel.</p>
<p>
Statement of Non-Discrimination: In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on: race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on &quot;protected categories,&quot; we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce &ndash; people who identify as women, non-binary or gender non-conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply. Thank you to the Level Playing Field Institute for this statement of non-discrimination.</p>
<p>
Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation.</p>
<p><b>
If you need any accommodations, please inform your recruiting contact upon initial connection.</b></p></div></div>

Senior Manager, Cyber Defense

Explore 189+ Cyber defense analyst in Washington this March. Find roles across top companies and apply now to boost your career.