business analyst

data analyst

senior cybersecurity analyst Jobs in Washington

senior cybersecurity analyst

analyst, data & analytics Jobs in Washington

analyst, data & analytics

anti-phishing training analyst Jobs in Washington

anti-phishing training analyst

cyber security analyst

CRITICAL SOLUTIONS

<div><p><b>Tier 1 Cyber Network Defense Analyst - Shift Schedule (w/ active TS)</b></p><p>
Location: Washington, DC
<br>
Full-time, Hybrid
<br>
Clearance: TS/SCI
<br>
Shift Schedule: Day Shift 7am - 7pm ET<br>
Salary Range: $58,000 - $74,000</p><p></p><p><b><br>
JOB DESCRIPTION</b></p><p>
Critical Solutions has an immediate opening for a Tier 1 Cyber Network Defense Analyst (CNDA) to support our federal customer in Washington, DC.
</p><p>The Tier 1 Cyber Network Defense Analyst (CNDA) will be part of a team that provides security operations center (SOC) support, cyber analysis, application development, and a 24x7x365 support staff. Candidates must have the ability to work non-core hours, if necessary.</p><p>
Duties include network security monitoring and detection. Proactively searching for threats. Inspect traffic for anomalies and new malware patterns. Investigate and analyze logs. Provide analysis and response to alerts, and document activity in SOC investigations and Security Event Notifications (SENs).</p><p></p><p><br>
PRIMARY ROLES AND RESPONSIBILITIES:</p><ul><li>
Utilize a SIEM for enterprise monitoring and detection</li><li>
Create Security Event Notifications to document investigation findings</li><li>
Perform critical thinking and analysis to investigate cyber security alerts</li><li>
Analyze network traffic using enterprise tools (e.g. Full PCAP, Firewall, Proxy logs, IDS logs, etc)</li><li>
Collaborate with team members to analyze an alert or a threat</li><li>
Stay up to date with latest threats</li><li>
Monitor shared email box for notifications and requests</li><li>
Utilize OSINT to aid in their investigation</li><li>
Contribute to content tuning requests</li></ul><p></p><p><br>
BASIC QUALIFICATIONS:</p><ul><li><b>
Active TS/SCI</b> and must be able to obtain and maintain an Entry on Duty (EOD) clearance</li><li>
must have the ability to work non-core hours, if necessary.</li><li>
Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field AND a minimum of two (2) years professional experience in the areas listed below:<ul><li>
Network Administration</li><li>
Unix/Linux Administration</li><li>
Software engineering</li><li>
Software development</li><li>
Systems administration</li><li>
Help desk/IT support</li></ul></li><li>
The ideal candidate is a self-motivated individual in pursuit of a career in cyber security.</li><li>
Familiarity with a SOC's purpose and role within an organization</li><li>
General understanding of common network ports and protocols (e.g. TCP/UDP, HTTP, ICMP, DNS, SMTP, etc)</li><li>
Familiarity with network topologies and network security device functions (e.g. Firewall, IDS/IPS, Proxy, DNS, etc).</li><li>
Familiarity with packet analysis tools such as Wireshark</li><li>
Able to perform critical thinking and analysis to investigate cyber security alerts</li><li>
Familiarity with common malware and attack vectors</li><li>
Familiarity with Windows operating systems and standard OS logging</li><li>
Familiarity with Antivirus, DLP, and host based firewalls</li><li>
Must have one of the following certifications: A+ CE, CCNA-Security, CND, Network+ CE, SSCP, Security+, CySA+</li></ul><p></p><p><br>
PREFERRED QUALIFICATIONS:</p><ul><li>
Familiar with SOC methodologies and processes</li><li>
Familiarity with scripting languages (e.g. Python, Powershell, Javascript, VBS etc)</li></ul><p></p><p><br>
SHIFT SCHEDULE:</p><p>
Shift schedule will be determine at the time of the start date</p><ul><li>
Day Shift Front: 7am - 7pm ET, Sunday - Tuesday and every other Wednesday (8hr shift)</li><li>
Day Shift Back: 7am - 7pm ET, Thursday - Saturday and every other Wednesday (8hr shift)</li><li>
Must have the ability to work non-core hours, if necessary.</li></ul><p></p><p><br>
LOCATION:</p><ul><li><b>
This is a hybrid role with expectations of being on the client site most days.</b></li><li>
Must be willing and able to commute to Washington, DC</li></ul><p></p><p><b><br>
ADDITIONAL INFORMATION:</b></p><p><b>
CLEARANCE REQUIREMENT:</b> <b>Must possess an active DoD Top Secret Clearance</b>. In addition, selected candidate must undergo background investigation (BI) and finger printing by the federal agency and successfully pass the preceding to qualify for the position. US CITIZENSHIP IS REQUIRED</p><p><b>
CRITICAL SOLUTIONS PAY AND BENEFITS</b>:
</p><p>Salary range $58,000 - $74,000. The salary range for this position represent the typical salary range for this job level and this does not guarantee a specific salary. Compensation is based upon multiple factors such as responsibilities of the job, education, experience, knowledge, skills, certifications, and other requirements.</p><p>
BENEFIT SNAPSHOT: 100% premium coverage for Medical, Dental, Vision, and Life Insurance, Supplemental Insurance, 401K matching, Flexible Time Off (PTO/Holidays), Higher Education/Training Reimbursement, and more</p></div>

T1 Cyber Network Defense Analyst – Day Shift (w/ active TS)

MCN Build

<div><div><div><div><div><b>GENESYS IMPACT LLC</b></div><div><b>
JOB DESCRIPTION</b></div><div><i>
Cloud &amp; Security Analyst I</i></div></div></div><div><div><div><b><br>
Department</b></div><div>
IT Services</div></div><div><div><b><br>
Location</b></div><div>
Washington, DC (Hybrid)</div></div><div><div><b><br>
FLSA Status</b></div><div>
Exempt</div></div><div><div><b><br>
Clearance</b></div><div>
MBI Public Trust or Higher</div></div></div></div><div></div><div><b><br>
ABOUT GENESYS IMPACT</b></div><div></div><div><br>
Genesys Impact LLC is a Washington, DC-based technology integrator specializing in IT managed services, cybersecurity, structured cabling, audiovisual systems, and physical security solutions. We serve commercial and federal government clients across the DMV area, delivering end-to-end technology solutions from design through implementation and ongoing support.</div><div><b>
POSITION SUMMARY</b></div><div>
The Cloud &amp; Security Analyst I is a technical role responsible for supporting Microsoft 365 cloud administration, cybersecurity compliance, and security governance activities across Genesys Impact client environments. This position will work closely with senior engineers and project managers to deliver managed services engagements for federal and commercial clients, with a focus on M365 platform management, data loss prevention, and security compliance frameworks.</div><div></div><div><b><br>
KEY RESPONSIBILITIES</b></div><div><b>
Microsoft 365 &amp; SharePoint Administration</b></div><div><ul><li>
Administer SharePoint Online site collections, document libraries, permissions, and governance policies across client M365 tenants</li><li>
Design and implement Power Automate workflows to automate business processes, notifications, and compliance-driven escalations</li><li>
Develop Power Apps and integrate with Microsoft Purview for eDiscovery, content holds, and incident response workflows</li><li>
Configure and maintain OneDrive, Teams, and Exchange Online environments in alignment with client security requirements</li><li>
Consolidate and migrate SharePoint sites; redesign information architecture and establish governance frameworks</li></ul></div><div></div><div><b><br>
Security, Compliance &amp; Data Governance</b></div><div><ul><li>
Implement and manage Data Loss Prevention (DLP) policies across M365 services including Exchange Online, OneDrive, and Teams</li><li>
Design Sensitive Information Types (SITs) and Trainable Classifiers to protect FII, PII, and SBU data categories</li><li>
Perform Data at Rest (DAR), Data in Motion (DIM), and Data in Use (DIU) scanning to identify and remediate exposed sensitive data</li><li>
Support implementation of access controls, governance policies, and compliance measures across integrated M365 services</li><li>
Monitor and respond to DLP policy violations, coordinating with client stakeholders on remediation actions</li><li>
Leverage Microsoft Defender for Cloud Apps (MDCA) and Microsoft Defender for Endpoint (MDE) for threat visibility and response</li></ul></div><div></div><div><b><br>
Automation &amp; Development</b></div><div><ul><li>
Develop Python-based automation scripts leveraging Microsoft Graph API and Security API to streamline security workflows and incident reporting</li><li>
Build integrations between M365 services, Purview eDiscovery, and ticketing/reporting platforms to reduce manual operational overhead</li><li>
Document automation solutions and contribute to internal knowledge base and runbooks</li></ul></div><div></div><div><b><br>
Client Engagement &amp; Support</b></div><div><ul><li>
Provide Tier 2/3 support to client staff on Microsoft 365 suite functionality including SharePoint, Teams, and OneDrive best practices</li><li>
Assist in preparation of federal and commercial technical proposals with input on M365, cloud, and cybersecurity scope sections</li><li>
Participate in client-facing meetings, status updates, and deliverable reviews under the guidance of senior staff</li></ul></div><div><b>
REQUIRED QUALIFICATIONS</b></div><div><ul><li>
Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field</li><li>
1&ndash;3 years of hands-on experience with SharePoint Online and the Microsoft 365 ecosystem</li><li>
Demonstrated experience with Power Automate workflow development</li><li>
Working knowledge of Microsoft Purview, DLP policies, and compliance frameworks</li><li>
Familiarity with Python scripting for automation and API integration (Microsoft Graph API a plus)</li><li>
MBI Public Trust clearance or ability to obtain one; higher clearances (Secret, TS) a plus</li><li>
Strong written and verbal communication skills with the ability to translate technical content for non-technical stakeholders</li></ul></div><div><b>
PREFERRED QUALIFICATIONS</b></div><div><ul><li>
M.S. in Information Systems, Cybersecurity, or related discipline</li><li>
Experience supporting federal agency M365 tenants (IRS, DoD, DHA, or similar)</li><li>
Exposure to Microsoft Defender for Cloud Apps (MDCA), Microsoft Defender for Endpoint (MDE), or Splunk SIEM/SOAR</li><li>
Familiarity with Palo Alto Networks, Strata Cloud Manager (SCM), or Symantec Broadcom DLP</li><li>
Microsoft certifications (MS-900, SC-900, AZ-900, MS-500, AZ-500) or active pursuit thereof</li><li>
Experience contributing to federal or state technical proposals</li></ul></div><div><b>
COMPENSATION &amp; BENEFITS</b></div><div></div><div><div><div><b><br>
Salary Range</b></div><div><br>
$80,000 &ndash; $90,000 annually</div></div><div><div><b><br>
Health Benefits</b></div><div><br>
Medical, dental, and vision coverage</div></div><div><div><b><br>
Paid Time Off</b></div><div><br>
Competitive PTO and federal holiday schedule</div></div><div><div><b><br>
Professional Dev.</b></div><div><br>
Certification reimbursement and training support</div></div><div><div><b><br>
Work Arrangement</b></div><div><br>
Hybrid &mdash; Washington, DC metro area; client site travel as required</div></div></div><div></div><div><i><br>
Genesys Impact LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.</i></div></div>

Cloud & Security Analyst I - Washington D.C.

Alyn Inc.

<p><b>Company Overview</b></p><p>Alyn Inc. partners with Fortune 50 companies and top government agencies to enhance their Cybersecurity Operations programs. Our mission is to align organizational structures with NextGen initiatives, ensuring efficiency and effectiveness in cybersecurity through expert guidance.</p><p><b>Cyber Threat Intelligence Analyst Summary:</b></p><p>Alȳn Inc. is seeking an experienced candidate to serve as Cyber Threat Intelligence Analyst in Washington, DC. The successful candidate is experienced in network operations, understanding cyber security policies and procedures, and evaluating emerging cyber threats and trends. This position will monitor emerging cyber threats, utilizing open source and classified analysis and research to provide proactive modeling, threat validation and attribution to communicate threats to the enterprise. This includes developing and maintaining a variety of intelligence products including threat research, threat profiles, executive overviews, intelligence briefings and alerts.</p><p><b>Cyber Threat Intelligence Analyst Responsibilities:</b></p><ul><li>Prepare detailed and comprehensive cyber intelligence analytical products including analysis reports, cyber threat assessments, and internal threat briefings on both operational and tactical intelligence for various audiences.</li><li>Engage and maintain relationships with security operations teams and cyber intelligence analyst counterparts across the US Intelligence and cyber communities for the purpose of sharing intelligence.</li><li>Monitor open-source information feeds and a variety of internal and external sources to maintain situational awareness on nation-state adversaries and targeted attack groups. Identify and fill any intelligence gaps.</li><li>Use formal intelligence analysis methods to collect information about Internet-based malware-related criminal activities and the actors behind them; perform extensive research using open source and classified data.</li><li>Develop and maintain a portfolio of known threat groups to include historical attacks and targets, known tools and malware, Tactics, Techniques and Procedures (TTPs), known infrastructure and indicators of compromise.</li><li>Utilize threat models as a structured approach to identify, classify, prioritize, and report on threats to the enterprise.</li></ul><p><b>Cyber Threat Intelligence Analyst Required Qualifications:</b></p><ul><li>Must be a US Citizen</li><li><b>Must hold an active Top Secret clearance with SCI eligibility.</b></li><li>6+ years performing cyber threat intelligence analysis.</li><li>Technical understanding in the following areas: network communication using TCP/IP protocols, basic system administration, basic understanding of malware (malware communication, installation, malware types), intermediate knowledge of computer network defense operations (web/email proxy, firewall, IDS/IPS, router/switch), ability to make sound remediation recommendations to enhance detection and protection from identified cyber threats.</li><li>Demonstrated understanding of cyber advanced persistent threats, actors, infrastructure, and TTPs.</li><li>Experience collecting, analyzing, correlating, and interpreting data from multiple sources for the purpose of documenting findings and providing meaningful relevant products.</li><li>Knowledge of and experience documenting threat actor TTPs using the MITRE ATT&amp;CK Framework.</li><li>Strong documentation and presentation skills.</li><li>All-source intelligence gathering and analysis techniques.</li></ul><p><b>Cyber Threat Intelligence Analyst Desired Qualifications:</b></p><ul><li>Formal training as an intelligence analyst in any discipline.</li><li>Experience conducting network and security log analysis within a SIEM.</li><li>Ability to develop/contribute to the development of impactful dashboards.</li><li>Experience with ThreatConnect TIP</li></ul><p><b>Education:</b></p><ul><li>BA/BS or equivalent work experience</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: $115,000.00 - $145,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Employee discount</li><li>Flexible spending account</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul><p>Experience:</p><ul><li>Cyber Threat Intelligence: 6 years (Required)</li></ul><p>Security clearance:</p><ul><li>Top Secret (Required)</li></ul><p>Ability to Commute:</p><ul><li>Washington, DC 20201 (Required)</li></ul><p>Work Location: Hybrid remote in Washington, DC 20201</p>

Cyber Threat Intelligence Analyst (TS/SCI Req)

ASRC Federal

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™
<br><br>
ASRC Agile Decision Sciences (ADS), a subsidiary of ASRC Federal, has a great opportunity for a Cybersecurity Professional to support our NASA program. This role will provide critical security oversight, assessment, and compliance support to ensure the protection and integrity of mission systems.
<br>Responsibilities
<br><ul>
<li>Monitor the health of network system security plans and implementations, ensuring responsiveness to emerging vulnerabilities and threats</li>
<li>Provide subject matter expertise on NASA security tools, including the Continuous Diagnostics and Mitigation (CDM) suite, Enterprise Data Warehouse, and RISCS</li>
<li>Perform Information Systems Security Officer (ISSO) functions to manage and maintain system security plans for NASA SCaN programmatic systems</li>
<li>Support security assessments and oversee activities aligned with CISA, NIST, and NASA guidance</li>
<li>Coordinate vulnerability management efforts, including tracking and remediation support</li>
<li>Collaborate with stakeholders to ensure compliance with federal and NASA cybersecurity requirements</li>
<li>Support scheduling, execution, and documentation of security assessments</li>
</ul>
Required Skills & Experience
<br><ul>
<li>Technical expertise in NASA and/or Federal security documentation, management, integration, and lifecycle management</li>
<li>Experience conducting or supporting security assessments and authorization processes (e.g., RMF)</li>
<li>Strong knowledge of NIST, CISA, and federal cybersecurity standards and frameworks</li>
<li>Familiarity with vulnerability management and remediation processes</li>
<li>Experience with NASA security tools and environments preferred</li>
<li>Active Top Secret (TS) clearance required</li>
</ul>
Education / Experience
<br><ul>
<li>Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)</li>
<li>5+ years of experience in cybersecurity, information assurance, or related roles</li>
<li>Relevant certifications (e.g., CISSP, Security+, CISM) preferred</li>
</ul>
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
<br><br>
EEO Statement
<br>ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.

Senior Cybersecurity Analyst

Arete Consulting LLC

<p><b>Overview:</b><br/>Arete Consulting is seeking a highly skilled Senior Cybersecurity Analyst to support the U.S. Coast Guard&rsquo;s Robotics and Autonomous Systems Program Executive Office (RAS PEO). This position focuses on cybersecurity compliance and lifecycle support for Unmanned Aircraft Systems (UAS) under the Risk Management Framework (RMF).</p><p><b>Duties:</b></p><ul><li>Develop and maintain RMF documentation to support acquisition lifecycle phases and Acquisition Decision Events (ADEs) across the RAS PEO. Prepare and maintain RMF documentation to support acquisition lifecycle phases and Acquisition Decision Events (ADEs).</li><li>Track and manage and validate Plan of Action and Milestones (POAMs) in eMASS, ensuring timely risk remediation and accurate reporting.</li><li>Oversee security control assessments, interpret scan results, and ensure transparency and traceability throughout the testing lifecycle.</li><li>Lead the preparation and submission of Authority to Operate (ATO) and Authority to Connect (ATC) packages; coordinate responses with CG-TECH, CGCYBER, ISSOs, and program stakeholders.</li><li>Support cybersecurity engineering and configuration management activities to ensure systems meet baseline and ongoing compliance requirements.</li><li>Provide lifecycle cybersecurity support from system inception through deployment, sustainment, and decommissioning.</li><li>Facilitate coordination between government program offices, cybersecurity service providers (CSSPs), and external partners to maintain accreditation and operational readiness.</li><li>Provide subject matter expertise on cybersecurity and risk posture, emerging threats, and mitigation strategies to inform program leadership decision-making.</li></ul><p><b>Qualifications:</b></p><ul><li>Active Top Secret Clearance required upon hire.</li><li>Demonstrated experience with the Risk Management Framework (RMF), including development of security authorization artifacts across RMF Steps 0-6.</li><li>Proficiency with eMASS for control inheritance, POA&amp;M management, and accreditation package development.</li><li>Hands-on experience supporting cybersecurity lifecycle management and configuration compliance for federal information systems.</li><li>Strong understanding of federal cybersecurity policies, including NIST 800-53, 800-37, and agency-level governance (e.g., DOD/CGCYBER directives).</li><li>Ability to work effectively within classified environments and collaborate with diverse government and contractor stakeholders.</li></ul><p><b>Preferred:</b></p><ul><li>Experience supporting acquisition programs, ATO/ATC processes, or cybersecurity integration for autonomous or aviation-relation systems.</li><li>Security certifications are a plus but not required.</li></ul><p>Pay: $110,000.00 - $135,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul><p>Work Location: In person</p>

Arc Aspicio

<div><p>Interested in working in an innovative, collaborative environment with motivated, social people? At Arc Aspicio, you can join a leading consulting firm that specializes in human capital, data analytics, management, and strategy professional services to deliver compelling solutions. Consultants join our practice focused on mission-critical projects and quickly learn to contribute to and grow our company across multiple projects. We invest in hiring, mentoring, and training smart, diverse, and self-driven professionals interested in all aspects of the company and our homeland security and Government clients. We are looking for people who are willing to share ideas and work as part of a collaborative, innovative team.</p><div>
The<b> Senior Cybersecurity Compliance Consultant (Federal Programs)</b> supports complex technology programs and oversees, manages, tracks, and reports on Government program-level information security to protect systems, facilities, and infrastructure. They have <b>8 years of relevant experience</b> <b>on complex mission-critical programs </b>and the ability to closely collaborate with Government leaders, facility managers, software development teams, and Government security offices.</div><p>
Arc Aspicio is currently working in a hybrid work environment where work will be performed at client sites, the Arc Aspicio DC office, and remotely. All candidates must live in the Washington, DC area at the time of employment.</p><p><b>
Responsibilities</b></p><ul><li>
Design, develop, and implement information security policies and procedures at a Government program level, consisting of a portfolio of applications, facilities, and infrastructure</li><li>
Directly interact with Program Leadership and Project Leads to conduct audits, manage security assets, documentation, processes, and procedures</li><li>
Develop assessment criteria to evaluate compliance with Government-wide information security policy directives</li><li>
Analyze and evaluate the security posture of existing programs and work with leads to implement changes and improvements</li><li>
Coordinate and conduct risk assessments to identify areas of potential vulnerability in systems and infrastructure used throughout the program</li><li>
Identify and contribute to new processes, techniques, and procedures to upgrade and enhance cyber-security protocols</li><li>
Provide technical advice and leadership on security aspects of network and systems design to promote implementation of appropriate systems security applications and policies</li><li>
Communicate security status, risk, actions, and initiatives with Government leadership</li><li>
Collaborate with our clients to solve tough problems, delivering outstanding client service, and achieving mission results</li><li>
Apply excellent consulting, business analysis, and communications skills to quickly identify problems, analyze challenges, and recommend solutions to our team and our clients</li><li>
Assists ISSO with responsibilities as required</li></ul><p><b>
Required Qualifications</b></p><ul><li><b>
At least 8 years of relevant cybersecurity and facility security experience </b>in overseeing and interacting within a portfolio of security assets and systems at a Government-program level that involves multiple systems and facilities</li><li>
Direct experience with senior clients and stakeholder engagement and delivering work products for clients in a complex environment</li><li>
Proven to be flexible and thrive in a dynamic, ambiguous, and complex work environment and manage multiple tasks and projects simultaneously</li><li>
Outstanding written and oral communication and collaboration skills and strong leadership potential</li><li>
Ability to collaborate and work effectively remotely and in-person</li><li>
Technologically savvy, especially with Microsoft products and use of collaboration tools like SharePoint</li><li>
Desire to join a consulting firm and learn business concepts; loves to collaborate and reach out to get involved in company events, offerings, and special projects</li><li>
Ability to work in the Washington, DC metro area and travel to different locations</li><li><b>
Clearance: </b>US Citizenship only (no dual citizenship)</li><li>
Currently holds or has the ability to obtain a <b>Top-Secret Clearance</b></li><li><b>
Education: </b>Bachelor&rsquo;s degree</li><li><b>
Critical Skills: </b>Executive presence, entrepreneurial spirit, strong work ethic, collaborative mind-set, excellent problem-solving skills, and interest in working in a consulting firm. Interest in working on assignments outside of one project is strongly desired</li></ul><p><b>
Preferred Qualifications</b></p><ul><li><b>
Certified Information Systems Security Professional (CISSP)</b> certified</li></ul><div><b>
Applying to Arc Aspicio: </b>Our recruiting process is very competitive. Therefore, we ask that you submit a brief, tailored cover letter to tell us what you are looking for in a company and why you would be a great fit for a consulting firm in this role. Cover letters are essential so we can understand your interest and experience relevant to consulting.</div><div></div><div><b>
Total Rewards: </b>Salary is just one element of our Total Rewards which includes compensation, benefits, bonuses, professional development, and other career opportunities. The projected salary range for this position is $108,000 - $140,000. This range takes into account the wide variety of factors that are considered in making compensation decisions, including but not limited to: skill sets and expertise, experience, education, training, certifications, contract and client requirements (if applicable), and other business and organizational needs. At Arc Aspicio, it is not typical for an individual to be hired at or near the top of the range for their role, and compensation decisions are dependent on the facts and circumstances of each case.</div><div>
</div><div><b>
About Arc Aspicio</b>: Arc Aspicio enhances the future of our nation by creating bold ideas and bringing them to life. A consulting and solutions company, Arc Aspicio solves problems by applying our integrated capabilities in strategy, design, data, human capital, behavioral science, and technology. The company passionately pursues our vision to be the hub of creativity where people take action to change the world. Employees collaborate with clients and partners to create solutions using a human-centered approach.</div><div>
</div><div>
Our goal is to attract people who love to collaborate and work in a team-oriented environment. Our culture empowers our employees to learn, share knowledge, be leaders in everything they do, and develop strong relationships with their clients and colleagues.</div><div>
</div><div>
Our positions are based in the DC metro area and require employees to live in DC, VA, and MD within commuting distance of our client sites and DC office.</div><div>
</div><div><b>
Commitment to Respect, Collaboration, and Innovation:</b><b> </b>Arc Aspicio is dedicated to fostering a workplace where individuals from all backgrounds can contribute to the company and serve our clients. As a growing professional services solutions firm focused on solving large, complex problems, we welcome applications from candidates with a variety of experience, skills, and knowledge. All employment is decided on the basis of qualifications, merit, and business need.<b> </b><b>Equal Opportunity Employer/M/F/D/V</b></div></div>

Senior Cybersecurity Compliance Consultant (Federal Programs)

Amtrak

<div><p><b>Your success is a train ride away!</b></p><p>
As we move America&rsquo;s workforce toward the future, Amtrak connects businesses and communities across the country. We employ more than 20,000 diverse, energetic professionals in a variety of career fields throughout the United States. The safety of our passengers, our employees, the public and our operating environment is our priority, and the success of our railroad is due to our employees.</p><p></p><p><b><br>
Are you ready to join our team?</b></p><p>
Our values of &lsquo;Do the Right Thing, Excel Together and Put Customers First&rsquo; are at the heart of what matters most to us, and our Core Capabilities, &lsquo;Building Trust, Accountability, Effective Communication, Customer Focus, and Proactive Safety &amp; Security&rsquo; are what every employee needs to know and do to be most impactful at Amtrak. By living the Amtrak values, focusing on our capabilities, and actively embracing and fostering diverse ideas, backgrounds, and perspectives, together we will honor our past and make Amtrak a company of the future.</p><p></p><p><br>
The <b>Principal Cyber Threat Incident Response Analyst </b>will play a critical role within the Amtrak Cyber Fusion Center. In this role, you will support a digital forensic cyber incident response team to effectively respond to and recovering from cybersecurity incidents. You will execute the cyber incident response plan, response playbooks, and will ensuring timely resolution of security breaches</p><p><b>
ESSENTIAL FUNCTIONS:</b></p><ul><li>
As a Principal Cyber Threat Incident Response Analyst, you will provide industry-leading cyber incident response supporting the Cyber Fusion Center mission to effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident</li><li>
You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment to support effective remediation, and crisis management</li><li>
In this role, you will technically navigate critical and high-profile incidents, performing digital forensic and incident response analysis with support from threat hunting, and malware triage analysts</li><li>
Support Amtrak-wide cyber incident response engagements, examine cloud, endpoint, and network-based sources of evidence</li><li>
Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations</li><li>
Both IT and OT Network analsis and forencis</li><li>
Experience handlig Malware and Malicious Code Reverse Engineering, Malware Analysis, Memory Analysis, Fileless Malware Analysis and Nation state actor malware investigations</li><li>
Build scripts, tools, or methodologies to enhance Amtrak&rsquo;s incident investigation processes</li><li>
Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations</li><li>
Support Cyber Incident Exercises, Tabletops, and Cyber Incident Management Response Team with business leaders, stakeholders, and cross-functional teams.</li><li>
Support with Crisis Management, Emergency Management, Incident Response, Legal and OIG teams to conduct and coordinate on Cyber Incident Response Activities.</li><li>
Preferred knowledge and familiarity with Operational Technology (OT), Industrial Controls Systems (ICS) or Supervisory Control and Data Acquisition (SCADA) systems but not required.</li><li>
Cybersecurity certifications, courses, or hands-on experience with some of the following:<ul><li><div><ul><li>
Advanced Threat Detection</li><li>
Hacker tools, techniques</li><li>
Penetration Testing, Exploit Writing, and Ethical Hacking</li><li>
Offensive Security, Security Operations, Web Application Testing, or Cloud Security</li><li>
Reverse-Malware Engineering</li><li>
Digital Forensics and Incident Response</li><li>
PowerShell, JavaScript and Python</li><li>
Relevant certifications including GIAC Certified Incident Handler (GCIH), Certified Incident Response Handler (GCFA) or similar</li><li>
Experience with using SIEM systems, network security tools, and log analysis tools</li><li>
Experience with cyber incident response</li><li>
Experience with Mitre ATT&amp;CK framework</li><li>
Experience with threat intelligence, vulnerability management, and security incident response</li></ul></div></li></ul></li><li>
Regularly participate in tabletop exercises designed to identify gaps, improve skills, enhance communication, and engage with stakeholders.</li><li>
Review technical reports from vulnerability and penetration testing assessments, as well as results from tabletop exercise to identify potential future incidents.</li><li>
Develop, refine, recommend, and maintain playbooks, policies, and procedures to ensure alignment to industry best practices.</li></ul><p><b>
MINIMUM QUALIFICATIONS:</b></p><ul><li>
Bachelor&rsquo;s degree in computer science, Information Systems, Cybersecurity, or related technical field plus 7-10 years of relevant experience is required.</li></ul><p><b>
Experience on one or the combination of the below to satisfy education and experience requirements:</b></p><ul><li><div><ul><li><div><ul><li><b>
Incident Response</b></li><li>
Vulnerability Management</li><li><b>
Digital Forensics</b></li><li><b>
Malware and Malicious Code Reverse Engineering</b></li><li><b>
Malware Analysis</b></li><li><b>
Memory Analysis</b></li><li><b>
Fileless Malware Analysis
</b></li><li><b>Nation state actor malware investigations</b></li><li>
Network or Cloud Security</li><li>
Penetration Testing</li></ul></div></li></ul></div></li></ul><p><b>
One incident response centric certification:</b></p><ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li></ul></div></li></ul></div></li></ul><p><b>
In depth understanding of threats, vulnerabilities and principals of incident response and chain of custody.</b></p><ul><li><b>
Hands on experience with forensics tools and log correlation.</b></li><li>
Ability to think like an attacker and hunt within the security tool stack.</li><li>
Ability to incorporate the MITRE ATT&amp;CK Framework in everyday processes.</li></ul><p><b>
 </b><b>PREFERRED QUALIFICATIONS:</b></p><ul><li>
Master's degree in Cybersecurity, Information Technology, Digital Forensics, Computer Science, or equivalent technical field</li><li>
10+ years of experience within the cybersecurity field</li><li>
Basic knowledge of Operation Technology (OT), SCADA, HVAC and/or IoT</li></ul><p><b>
Two or more incident response centric certifications:</b></p><ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li></ul></div></li></ul></div></li></ul><p><b>
WORK ENVIRONMENT:</b></p><ul><li>
Amtrak offers several options for a working environment including 100% remote, on-site, and/or a hybrid schedule.</li><li>
This is a position that requires off-hours work and on-call participation.</li><li>
Please note your headquarters office may be in any one of Amtrak&rsquo;s locations across the United States. The ability and willingness to travel up to 30% to other office locations is required.</li></ul><p><b>
COMMUNICATIONS AND INTERPERSONAL SKILLS:</b><br>
Must have excellent oral and written communication skills.</p><p>
The salary/hourly range is $124,600-$161,352, Pay is based on several factors including but not limited to education, work experience, certifications, internal equity, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position and/or long-term incentive plan compensation. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.</p><p>
The salary/hourly range is $124,600.00 &ndash; $161,352.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.</p><p></p><p><b><br>
Requisition ID:</b>166157</p><p><b>
Work Arrangement:</b>06-Onsite 4/5 Days Click here for more information about work arrangements at Amtrak.
<br>
<b>Relocation Offered:</b>No
<br>
<b>Travel Requirements:</b>Up to 25%</p><p><b>
You power our progress through your performance.</b></p><p>
We want your work at Amtrak to be more than a job. We want your career at Amtrak to be a fulfilling experience where you find challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. Amtrak maintains a culture that values high performance and recognizes individual employee contributions.</p><p><br>
Amtrak is committed to a safe workplace free of drugs and alcohol. All Amtrak positions requires a pre-employment background check that includes prior employment verification, a criminal history check and a pre-employment drug screen.</p><p>
Candidates who test positive for marijuana will be disqualified, regardless of any state or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. Amtrak's pre-employment drug testing program is administered in accordance with DOT regulations and applicable law.</p><p><br>
In accordance with DOT regulations (49 CFR &sect; 40.25), Amtrak is required to obtain prior drug and alcohol testing records for applicants/employees intending to perform safety-sensitive duties for covered Department of Transportation positions. If an applicant/employee refuses to provide written consent for Amtrak to obtain these records, the individual will not be permitted to perform safety-sensitive functions.</p><p></p><p><br>
In accordance with federal law governing security checks of covered individuals for providers of public transportation (Title 6 U.S.C. &sect;1143), Amtrak is required to screen applicants for any permanent or interim disqualifying criminal offenses.</p><p><br>
Note that any education requirement listed above may be deemed satisfied if you have an equivalent combination of education, training and experience.</p><p><br>
Amtrak is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race/color, to include traits historically associated with race, including but not limited to, hair texture and hairstyles such as braids, locks and twists, religion, sex (including pregnancy, childbirth and related conditions, such as lactation), national origin/ethnicity, disability (intellectual, mental and physical), veteran status, marital status, ancestry, sexual orientation, gender identity and gender expression, genetic information, citizenship or any other personal characteristics protected by law.</p></div>

Principal Incident Response Analyst (Digital Forensics)- 90406800 - Remote

Explore 227+ Cyber security analyst in Washington this April. Find roles across top companies and apply now to boost your career.

227 cyber security analyst jobs In Washington

T1 Cyber Network Defense Analyst – Day Shift (w/ active TS)

Cloud & Security Analyst I - Washington D.C.

Cyber Threat Intelligence Analyst (TS/SCI Req)

Senior Cybersecurity Analyst

Senior Cybersecurity Analyst

Senior Cybersecurity Compliance Consultant (Federal Programs)

Principal Incident Response Analyst (Digital Forensics)- 90406800 - Remote