senior cybersecurity analyst

application security engineer Jobs in Washington

application security engineer

cloud & security analyst i - washington d.c. Jobs in Washington

cyber threat intelligence analyst (ts/sci req) Jobs in Washington

cyberark architect

cyber security engineer

IT Security EngineerWe are seeking a highly skilled and proactive IT Security Engineer to take ownership of the organization&rsquo;s end-to-end security program. This individual will be responsible for protecting systems, data, and infrastructure while partnering cross-functionally to ensure security is embedded across all technology and business operations. This role reports directly to the IT Director.Key Responsibilities<ul><li>Own and manage the full lifecycle of the organization&rsquo;s cybersecurity program</li><li>Conduct penetration testing, vulnerability scanning, and ongoing risk assessments to identify and mitigate threats</li><li>Develop, implement, and maintain security policies, procedures, and compliance documentation</li><li>Ensure adherence to regulatory frameworks including GDPR and HIPAA, with future exposure to ISO standards</li><li>Lead incident response efforts, including investigation, containment, and remediation of security events</li><li>Collaborate with internal teams to integrate security into daily operations and new technology initiatives</li><li>Provide strategic input on the development and evolution of the organization&rsquo;s technology stack</li><li>Manage vendor relationships, including evaluating third-party security practices and overseeing audits</li><li>Oversee endpoint and system security, including patching, monitoring, and access controls</li><li>Partner with external security vendors (e.g., SOC, EDR) to monitor systems and respond to threats</li><li>Deliver security awareness training and guidance to end users to reduce risk and improve best practices</li><li>Support audits, security questionnaires, and compliance-related requests</li></ul>Technical Environment<ul><li>Microsoft Azure Active Directory supporting approximately 130 end users</li><li>Experience with cloud security, identity and access management, MFA, and endpoint protection tools</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field (or equivalent experience)</li><li>5+ years of experience in cybersecurity or security engineering roles</li><li>Strong expertise in security technologies including firewalls, VPNs, SIEMs, IDS/IPS, and endpoint security</li><li>Experience with penetration testing, vulnerability management, and incident response</li><li>Familiarity with compliance frameworks such as GDPR, HIPAA, and general knowledge of ISO standards</li><li>Industry certifications such as CISSP, CISM, or similar are preferred</li></ul>Skills &amp; Competencies<ul><li>Strong analytical and problem-solving abilities with a proactive approach to risk mitigation</li><li>Excellent written and verbal communication skills, with the ability to translate technical concepts to non-technical stakeholders</li><li>High attention to detail and ability to manage multiple priorities in a fast-paced environment</li><li>Strong cross-functional collaboration and stakeholder management skills</li></ul>Additional Information<ul><li>Role requires local candidates with a hybrid schedule of three days onsite (Monday required)</li><li>Involves regular interaction with leadership and cross-functional teams across the organization</li><li>Interview process consists of three stages: initial virtual interview followed by two onsite meetings with technical leadership and executive team</li></ul>Pay: $130,000.00 - $170,000.00 per yearWork Location: Hybrid remote in Washington, DC 20036

IT Security Engineer

Quzara LLC

<div>Job Title: Cybersecurity Cloud Engineer
Pay Type: SALARIED EXEMPT
Location: Hybrid, Washington, DC (Must Work East Coast Hours)
Citizenship: U.S. Citizenship (Required)
Summary of Position Role/Responsibilities
The Cybersecurity Cloud Engineer is responsible for designing, implementing, and maintaining secure cloud environments across Quzara&rsquo;s federal and commercial platforms. This role emphasizes deploying and managing cloud-native security controls, integrating cloud telemetry with security operations tools, and ensuring ongoing compliance with federal standards such as NIST, FedRAMP, and agency-specific policies. The position supports secure architectures in IaaS, PaaS, and SaaS environments, requiring hands-on expertise in cloud security services, strong knowledge of security operations integration, and the ability to drive both engineering and compliance initiatives.
Essential Functions of the Job<div><ul><li>
Implement and support secure cloud architectures aligned with NIST, FedRAMP, and agency-specific security policies.</li><li>
Support the design and maintenance of cloud security reference architectures across platforms such as AWS and Microsoft Azure.</li><li>
Configure and maintain cloud-native security services and controls, including identity, logging, monitoring, and threat protection capabilities.</li><li>
Integrate cloud telemetry and logging data into SIEM and Security Operations (SecOps) platforms to support monitoring and detection activities.</li><li>
Support cloud security incident detection, investigation, and remediation in coordination with SOC and incident response teams.</li><li>
Assist in the enforcement of continuous compliance requirements, including validation of control implementation and support for audit readiness.</li><li>
Produce and maintain cloud security documentation, including system diagrams, architecture artifacts, and control narratives.</li><li>
Collaborate with engineering, DevSecOps, and compliance teams to ensure alignment between cloud implementations and security requirements.</li></ul></div>
Marginal Functions of the Job<div><ul><li>
Other duties as assigned</li></ul></div>
Normal Work Schedule:
This full-time role runs Monday to Friday, 8:30 AM&ndash;5:30 PM and requires flexibility to work remotely or on-site (if applicable per client RTO policies). On occasion additional hours may be necessary.
Education, Training, and Experience<div><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field.</li><li>
3&ndash;5+ years of experience supporting cloud security engineering or cloud infrastructure in regulated environments.</li><li>
Hands-on experience with cloud platforms such as AWS and/or Microsoft Azure.</li><li>
Familiarity with federal cybersecurity frameworks including NIST SP 800-53 and FedRAMP.</li><li>
Experience configuring cloud-native security tools (e.g., identity and access controls, logging, monitoring, and threat protection services).</li><li>
Experience integrating cloud environments with SIEM or SecOps platforms.</li><li>
Ability to produce technical documentation, diagrams, and security artifacts.</li><li>
Strong analytical and problem-solving skills, with the ability to support incident response and remediation efforts.</li><li>
Must be a U.S. Citizen and eligible to support federal contracting environments.</li></ul></div>
Preferred Certifications<div><ul><li>
Cloud and security certifications such as:<ul><li>
AWS Certified Solutions Architect</li><li>
Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li><li>
CompTIA Security+</li></ul></li><li>
Additional certifications related to cloud security or compliance frameworks are also a plus.</li></ul></div>
EEO Statement
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.</div>

Cybersecurity Cloud Engineer

<div>Description<div><div>
Our Digital Modernization Division is an information technology and management consulting department that offers integrated, strategic solutions to its public and private-sector clients. ICF has the expertise, agility, and commitment to design, build, and operate high-performance IT engines to support all aspects of our client&rsquo;s business.
ICF is seeking an experienced and driven Software Security Engineer to lead and oversee mission-critical initiatives in support of the General Service Administration (GSA). In this role, you will help safeguard applications and cloud-based systems by integrating security best practices throughout the software development lifecycle.
Job Location: Must be able to go on-site 5 days a week to the client's office in Washington, DC. Hybrid work flexibility may be available after the first 90 days.
What You Will Do:<ul><li>
Integrate security best practices throughout the software development lifecycle (SDLC) for applications and cloud environments</li><li>
Perform secure code reviews and vulnerability assessments using industry‑standard tools, including SAST, DAST, and SCA solutions</li><li>
Design, implement, and validate security controls within cloud environments such as AWS and AWS GovCloud</li><li>
Identify security weaknesses, prioritize risks, and support remediation efforts to ensure compliance with federal security requirements</li><li>
Support systems operating in regulated and high‑security environments</li><li>
Conduct research and provide recommendations on emerging security threats, tools, and best practices</li><li>
Collaborate with development, DevOps, and compliance teams to ensure secure system design and implementation</li><li>
Lead or guide teams in resolving compliance gaps and security findings under tight deadlines</li></ul>
What You Will Bring With You:
<ul><li>Bachelor&rsquo;s degree in Computer Science, Engineering, Information Systems, or related technical field</li><li>
Professional certifications: CISSP, CISM, CISA, Security+, or GIAC certifications</li><li>
5 years experience with working on/around cloud platforms in AWS.</li><li>
Must be able to obtain and maintain a Public Trust clearance.</li><li>
MUST RESIDE IN THE United States (U.S.) and the work MUST BE PERFORMED in the United States (U.S.) as this work is for a federal contract, and laws do apply.</li></ul>
What We Would Like You To Bring With You:<ul><li>
Hands-on experience performing secure code reviews and vulnerability assessments using industry-standard tools (e.g., SAST, DAST, SCA).</li><li>
Experience implementing security controls in cloud environments (e.g., AWS GovCloud or similar secure federal cloud environments).</li><li>
Strong understanding of secure coding standards (e.g., OWASP, NIST, DoD STIGs).</li><li>
Experience supporting systems within regulated or high-security environments.</li><li>
Ability to self-organize, priorities and conduct research on multiple projects under tight deadlines in a fast-paced environment.</li><li>
Experience supporting and maintaining CATO</li><li>
Understanding of the GSA FedRamp process</li><li>
Experience with NIST Cybersecurity Framework or similar security frameworks</li><li>
Ability to lead and direct teams to remediate compliance issues</li></ul></div></div>
Working at ICF
ICF is a global advisory and technology services provider, but we&rsquo;re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.<div>
We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy.
We will consider for employment qualified applicants with arrest and conviction records. 
Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email Candidateaccommodation@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.</div><div>
Read more about workplace discrimination rights or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act.</div><div> 
Candidate AI Usage Policy</div><div><div>
At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.</div><div>
However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at candidateaccommodation@icf.com. We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.</div></div> 
Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.
The pay range for this position based on full-time employment is:
$108,006.00 - $183,610.00
DC Client Office (DC88)</div>

Software Security Engineer (Public Trust)

Gunnison Consulting Group, Inc.

<div>Description:

Salary: $115,000 - $125,000/year
We are seeking a knowledgeable and detail-oriented Cybersecurity Compliance Subject Matter Expert (SME) to support our Department of State client. This role will support the continued maturation of the customer&rsquo;s cybersecurity program by contributing expert guidance on cyber policy, compliance, risk management, and operational reporting. The ideal candidate combines deep compliance expertise with strong analytical and data visualization skills to support informed decision-making through metrics and dashboards.
Duties and Responsibilities<ul><li>
Support the development, interpretation, and implementation of cybersecurity policies and procedures within a secure software development environment, ensuring alignment with applicable security framework series and federal requirements.</li><li>
Serve as a cybersecurity compliance SME for U.S. Government contracting environments, maintaining up-to-date knowledge of relevant regulations, standards, and policies and advising stakeholders on their application.</li><li>
Conduct risk assessments, identify security control gaps and vulnerabilities, and recommend mitigation strategies to strengthen security posture across development and operational environments.</li><li>
Support compliance monitoring activities, including preparation for audits, assessments, and inspections; assist in identifying findings and contributing to remediation planning and documentation.</li><li>
Collaborate with security, engineering, and program stakeholders to support the development and delivery of role-based cybersecurity training (e.g., SO, ISSO, ISSM) and security awareness initiatives.</li><li>
Develop, maintain, and analyze cybersecurity compliance metrics to measure program effectiveness, control performance, and risk trends.</li><li>
Design and produce cybersecurity dashboards and reports using Power BI, Excel, and related tools, translating complex compliance and risk data into clear, actionable visualizations for technical and non-technical audiences.</li><li>
Support continuous process improvement by identifying opportunities to streamline compliance tracking, reporting, and documentation within a dynamic software development environment.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Systems, Computer Science, or a related field; equivalent relevant experience may be considered in lieu of a degree.</li><li>
Minimum of 8 years of experience in cybersecurity compliance, with demonstrated experience supporting U.S. Government contracting and software development environments.</li><li>
Strong working knowledge of U.S. Government cybersecurity regulations and standards, including NIST, FISMA, FedRAMP, DFARS, and related frameworks.</li><li>
Experience supporting security audits, assessments, or compliance reviews within federal or government-regulated environments.</li><li>
Proven ability to analyze compliance and security data and translate findings into meaningful metrics, reports, and recommendations.</li><li>
Proficiency in Excel (data analysis, pivot tables, charts) and experience designing Power BI dashboards or similar data visualization solutions.</li><li>
Excellent written and verbal communication skills, with the ability to clearly explain cybersecurity risks, compliance requirements, and trends to diverse stakeholders.</li><li>
Detail-oriented and proactive mindset with a strong focus on accuracy, documentation quality, and continuous improvement.</li></ul>
Desired Qualifications:<ul><li>
Cybersecurity certifications such as CISSP, CISM, or equivalent.</li><li>
Experience with Department of State FAM/FAH, including integration of requirements into system documentation, processes, and compliance artifacts.</li><li>
Prior experience developing or maintaining executive-level or program-level cybersecurity dashboards.</li><li>
Familiarity with SDLC-related compliance artifacts (SSP, POA&amp;M, RA, CMF documentation, etc.).</li></ul>
Clearance Requirement: Active Secret clearance required. 
The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements. 
Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include:<ul><li>
3 weeks of Personal Leave your first year</li><li>
11 paid Holidays each year</li><li>
5 days of Flexible Time Off each year</li><li>
401(k) company match at 50% up to 10% of your salary</li><li>
Medical, Dental and Vision Insurance</li><li>
Life and Disability Insurance</li><li>
Public Transportation Subsidies</li><li>
Certifications and Training Allowance - $2,500/year!</li></ul>
Why Join Gunnison?<ul><li>
Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.</li><li>
Quality is our top priority.</li><li>
Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.</li><li>
There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.</li><li>
We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.</li><li>
We hire for careers at Gunnison, not to fill a position.</li></ul>
Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time. 
In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects. By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could, the company has thrived for over 25 years.</div>

Cybersecurity Compliance SME

<div>Job Title: Cybersecurity Solutions Architect (CSA)
Pay Type: SALARIED EXEMPT
Location: Hybrid, Washington, DC (Must Work East Coast Hours, United States)
Citizenship: U.S. Citizenship (Required)
Summary of Position Role/Responsibilities
The Cybersecurity Solutions Architect (CSA) acts as the technical authority for designing, validating, and overseeing comprehensive cybersecurity solutions across Quzara&rsquo;s federal and enterprise environments. This role ensures alignment with Zero Trust principles, enterprise standards, and mission-specific requirements, while translating complex security and operational needs into scalable, resilient, and compliant technical architectures for cloud and hybrid settings. Additionally, the CSA advises leadership on architectural risks, technology tradeoffs, and long-term technical direction to support the secure delivery of solutions under the Technology Support Services (TSS) framework.
Essential Functions of the Job<div><ul><li>
Design and validate end-to-end cybersecurity solution architectures across cloud, hybrid, and enterprise environments.</li><li>
Translate security, compliance, and mission requirements into implementable technical designs and architectural blueprints.</li><li>
Review and approve security architectures, system diagrams, and integration patterns to ensure consistency and compliance with standards.</li><li>
Ensure alignment of all solutions with Zero Trust architecture principles, SecOps tooling, and enterprise security frameworks.</li><li>
Identify architectural risks, gaps, and constraints, and provide actionable mitigation strategies.</li><li>
Provide technical oversight and governance during solution implementation, ensuring adherence to approved architectures.</li><li>
Establish architecture patterns and implementation approaches that support scalability, resilience, high availability, and business continuity.</li><li>
Oversee and guide technical change management processes impacting system architecture and integrations.</li><li>
Advise executive leadership and stakeholders on technical direction, risk posture, and tradeoffs associated with cybersecurity solutions.</li><li>
Support technology selection, vendor evaluations, and solution design decisions from an architectural and security perspective.</li></ul></div>
Marginal Functions of the Job<div><ul><li>
Other duties as assigned</li></ul></div>
Normal Work Schedule:
This full-time role runs Monday to Friday, 8:30 AM&ndash;5:30 PM and requires flexibility to work remotely or on-site (if applicable per client RTO policies). On occasion additional hours may be necessary.
Education, Training, and Experience<div><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, or a related field.</li><li>
8+ years of experience in cybersecurity, with a strong focus on solution architecture, system design, and security engineering.</li><li>
Demonstrated experience designing and implementing enterprise security architectures in cloud and hybrid environments.</li><li>
Strong understanding of Zero Trust architecture, security frameworks, and enterprise security design principles.</li><li>
Experience translating business and mission requirements into technical architecture solutions.</li><li>
Proven ability to lead architectural reviews and provide technical governance across multiple projects.</li><li>
Experience advising senior leadership on security risks, tradeoffs, and technical strategy.</li><li>
Familiarity with federal and regulatory frameworks such as NIST SP 800-53, FedRAMP, and related compliance standards is preferred.</li><li>
Strong communication skills with the ability to present complex architectural concepts to both technical and executive audiences.</li><li>
Must be a U.S. Citizen and eligible to support federal contracting environments.</li></ul></div>
Preferred Certifications<div><ul><li>
CISSP (Certified Information Systems Security Professional)</li><li>
AWS Certified Solutions Architect or Microsoft Certified: Azure Solutions Architect Expert (AZ-305)</li><li>
Certified Cloud Security Professional (CCSP) or equivalent</li><li>
Additional enterprise architecture or security certifications are also a plus</li></ul></div>
EEO Statement
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.</div>

Cybersecurity Solutions Architect

Amtrak

<div>Your success is a train ride away!
As we move America&rsquo;s workforce toward the future, Amtrak connects businesses and communities across the country. We employ more than 20,000 diverse, energetic professionals in a variety of career fields throughout the United States. The safety of our passengers, our employees, the public and our operating environment is our priority, and the success of our railroad is due to our employees. 
Are you ready to join our team?
Our values of &lsquo;Do the Right Thing, Excel Together and Put Customers First&rsquo; are at the heart of what matters most to us, and our Core Capabilities, &lsquo;Building Trust, Accountability, Effective Communication, Customer Focus, and Proactive Safety &amp; Security&rsquo; are what every employee needs to know and do to be most impactful at Amtrak. By living the Amtrak values, focusing on our capabilities, and actively embracing and fostering diverse ideas, backgrounds, and perspectives, together we will honor our past and make Amtrak a company of the future. 
The Principal Cyber Threat Incident Response Analyst will play a critical role within the Amtrak Cyber Fusion Center. In this role, you will support a digital forensic cyber incident response team to effectively respond to and recovering from cybersecurity incidents. You will execute the cyber incident response plan, response playbooks, and will ensuring timely resolution of security breaches
ESSENTIAL FUNCTIONS:<ul><li>
As a Principal Cyber Threat Incident Response Analyst, you will provide industry-leading cyber incident response supporting the Cyber Fusion Center mission to effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident</li><li>
You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment to support effective remediation, and crisis management</li><li>
In this role, you will technically navigate critical and high-profile incidents, performing digital forensic and incident response analysis with support from threat hunting, and malware triage analysts</li><li>
Support Amtrak-wide cyber incident response engagements, examine cloud, endpoint, and network-based sources of evidence</li><li>
Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations</li><li>
Both IT and OT Network analsis and forencis</li><li>
Experience handlig Malware and Malicious Code Reverse Engineering, Malware Analysis, Memory Analysis, Fileless Malware Analysis and Nation state actor malware investigations</li><li>
Build scripts, tools, or methodologies to enhance Amtrak&rsquo;s incident investigation processes</li><li>
Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations</li><li>
Support Cyber Incident Exercises, Tabletops, and Cyber Incident Management Response Team with business leaders, stakeholders, and cross-functional teams.</li><li>
Support with Crisis Management, Emergency Management, Incident Response, Legal and OIG teams to conduct and coordinate on Cyber Incident Response Activities.</li><li>
Preferred knowledge and familiarity with Operational Technology (OT), Industrial Controls Systems (ICS) or Supervisory Control and Data Acquisition (SCADA) systems but not required.</li><li>
Cybersecurity certifications, courses, or hands-on experience with some of the following:<ul><li><div><ul><li>
Advanced Threat Detection</li><li>
Hacker tools, techniques</li><li>
Penetration Testing, Exploit Writing, and Ethical Hacking</li><li>
Offensive Security, Security Operations, Web Application Testing, or Cloud Security</li><li>
Reverse-Malware Engineering</li><li>
Digital Forensics and Incident Response</li><li>
PowerShell, JavaScript and Python</li><li>
Relevant certifications including GIAC Certified Incident Handler (GCIH), Certified Incident Response Handler (GCFA) or similar</li><li>
Experience with using SIEM systems, network security tools, and log analysis tools</li><li>
Experience with cyber incident response</li><li>
Experience with Mitre ATT&amp;CK framework</li><li>
Experience with threat intelligence, vulnerability management, and security incident response</li></ul></div></li></ul></li><li>
Regularly participate in tabletop exercises designed to identify gaps, improve skills, enhance communication, and engage with stakeholders.</li><li>
Review technical reports from vulnerability and penetration testing assessments, as well as results from tabletop exercise to identify potential future incidents.</li><li>
Develop, refine, recommend, and maintain playbooks, policies, and procedures to ensure alignment to industry best practices.</li></ul>
MINIMUM QUALIFICATIONS:<ul><li>
Bachelor&rsquo;s degree in computer science, Information Systems, Cybersecurity, or related technical field plus 7-10 years of relevant experience is required.</li></ul>
Experience on one or the combination of the below to satisfy education and experience requirements:<ul><li><div><ul><li><div><ul><li>
Incident Response</li><li>
Vulnerability Management</li><li>
Digital Forensics</li><li>
Malware and Malicious Code Reverse Engineering</li><li>
Malware Analysis</li><li>
Memory Analysis</li><li>
Fileless Malware Analysis
</li><li>Nation state actor malware investigations</li><li>
Network or Cloud Security</li><li>
Penetration Testing</li></ul></div></li></ul></div></li></ul>
One incident response centric certification:<ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li></ul></div></li></ul></div></li></ul>
In depth understanding of threats, vulnerabilities and principals of incident response and chain of custody.<ul><li>
Hands on experience with forensics tools and log correlation.</li><li>
Ability to think like an attacker and hunt within the security tool stack.</li><li>
Ability to incorporate the MITRE ATT&amp;CK Framework in everyday processes.</li></ul>
 PREFERRED QUALIFICATIONS:<ul><li>
Master's degree in Cybersecurity, Information Technology, Digital Forensics, Computer Science, or equivalent technical field</li><li>
10+ years of experience within the cybersecurity field</li><li>
Basic knowledge of Operation Technology (OT), SCADA, HVAC and/or IoT</li></ul>
Two or more incident response centric certifications:<ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li></ul></div></li></ul></div></li></ul>
WORK ENVIRONMENT:<ul><li>
Amtrak offers several options for a working environment including 100% remote, on-site, and/or a hybrid schedule.</li><li>
This is a position that requires off-hours work and on-call participation.</li><li>
Please note your headquarters office may be in any one of Amtrak&rsquo;s locations across the United States. The ability and willingness to travel up to 30% to other office locations is required.</li></ul>
COMMUNICATIONS AND INTERPERSONAL SKILLS: 
Must have excellent oral and written communication skills.
The salary/hourly range is $124,600-$161,352, Pay is based on several factors including but not limited to education, work experience, certifications, internal equity, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position and/or long-term incentive plan compensation. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.
The salary/hourly range is $124,600.00 &ndash; $161,352.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here. 
Requisition ID:166157
Work Arrangement:06-Onsite 4/5 Days Click here for more information about work arrangements at Amtrak.
 
Relocation Offered:No
 
Travel Requirements:Up to 25%
You power our progress through your performance.
We want your work at Amtrak to be more than a job. We want your career at Amtrak to be a fulfilling experience where you find challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. Amtrak maintains a culture that values high performance and recognizes individual employee contributions. 
Amtrak is committed to a safe workplace free of drugs and alcohol. All Amtrak positions requires a pre-employment background check that includes prior employment verification, a criminal history check and a pre-employment drug screen.
Candidates who test positive for marijuana will be disqualified, regardless of any state or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. Amtrak's pre-employment drug testing program is administered in accordance with DOT regulations and applicable law. 
In accordance with DOT regulations (49 CFR &sect; 40.25), Amtrak is required to obtain prior drug and alcohol testing records for applicants/employees intending to perform safety-sensitive duties for covered Department of Transportation positions. If an applicant/employee refuses to provide written consent for Amtrak to obtain these records, the individual will not be permitted to perform safety-sensitive functions. 
In accordance with federal law governing security checks of covered individuals for providers of public transportation (Title 6 U.S.C. &sect;1143), Amtrak is required to screen applicants for any permanent or interim disqualifying criminal offenses. 
Note that any education requirement listed above may be deemed satisfied if you have an equivalent combination of education, training and experience. 
Amtrak is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race/color, to include traits historically associated with race, including but not limited to, hair texture and hairstyles such as braids, locks and twists, religion, sex (including pregnancy, childbirth and related conditions, such as lactation), national origin/ethnicity, disability (intellectual, mental and physical), veteran status, marital status, ancestry, sexual orientation, gender identity and gender expression, genetic information, citizenship or any other personal characteristics protected by law.</div>

Principal Incident Response Analyst (Digital Forensics)- 90406800 - Remote

Alyn Inc.

Company OverviewAlyn Inc. partners with Fortune 50 companies and top government agencies to enhance their Cybersecurity Operations programs. Our mission is to align organizational structures with NextGen initiatives, ensuring efficiency and effectiveness in cybersecurity through expert guidance.Cyber Threat Intelligence Analyst Summary:Alȳn Inc. is seeking an experienced candidate to serve as Cyber Threat Intelligence Analyst in Washington, DC. The successful candidate is experienced in network operations, understanding cyber security policies and procedures, and evaluating emerging cyber threats and trends. This position will monitor emerging cyber threats, utilizing open source and classified analysis and research to provide proactive modeling, threat validation and attribution to communicate threats to the enterprise. This includes developing and maintaining a variety of intelligence products including threat research, threat profiles, executive overviews, intelligence briefings and alerts.Cyber Threat Intelligence Analyst Responsibilities:<ul><li>Prepare detailed and comprehensive cyber intelligence analytical products including analysis reports, cyber threat assessments, and internal threat briefings on both operational and tactical intelligence for various audiences.</li><li>Engage and maintain relationships with security operations teams and cyber intelligence analyst counterparts across the US Intelligence and cyber communities for the purpose of sharing intelligence.</li><li>Monitor open-source information feeds and a variety of internal and external sources to maintain situational awareness on nation-state adversaries and targeted attack groups. Identify and fill any intelligence gaps.</li><li>Use formal intelligence analysis methods to collect information about Internet-based malware-related criminal activities and the actors behind them; perform extensive research using open source and classified data.</li><li>Develop and maintain a portfolio of known threat groups to include historical attacks and targets, known tools and malware, Tactics, Techniques and Procedures (TTPs), known infrastructure and indicators of compromise.</li><li>Utilize threat models as a structured approach to identify, classify, prioritize, and report on threats to the enterprise.</li></ul>Cyber Threat Intelligence Analyst Required Qualifications:<ul><li>Must be a US Citizen</li><li>Must hold an active Top Secret clearance with SCI eligibility.</li><li>6+ years performing cyber threat intelligence analysis.</li><li>Technical understanding in the following areas: network communication using TCP/IP protocols, basic system administration, basic understanding of malware (malware communication, installation, malware types), intermediate knowledge of computer network defense operations (web/email proxy, firewall, IDS/IPS, router/switch), ability to make sound remediation recommendations to enhance detection and protection from identified cyber threats.</li><li>Demonstrated understanding of cyber advanced persistent threats, actors, infrastructure, and TTPs.</li><li>Experience collecting, analyzing, correlating, and interpreting data from multiple sources for the purpose of documenting findings and providing meaningful relevant products.</li><li>Knowledge of and experience documenting threat actor TTPs using the MITRE ATT&amp;CK Framework.</li><li>Strong documentation and presentation skills.</li><li>All-source intelligence gathering and analysis techniques.</li></ul>Cyber Threat Intelligence Analyst Desired Qualifications:<ul><li>Formal training as an intelligence analyst in any discipline.</li><li>Experience conducting network and security log analysis within a SIEM.</li><li>Ability to develop/contribute to the development of impactful dashboards.</li><li>Experience with ThreatConnect TIP</li></ul>Education:<ul><li>BA/BS or equivalent work experience</li></ul>Job Types: Full-time, PermanentPay: $115,000.00 - $145,000.00 per yearBenefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Employee discount</li><li>Flexible spending account</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul>Experience:<ul><li>Cyber Threat Intelligence: 6 years (Required)</li></ul>Security clearance:<ul><li>Top Secret (Required)</li></ul>Ability to Commute:<ul><li>Washington, DC 20201 (Required)</li></ul>Work Location: Hybrid remote in Washington, DC 20201

Cyber Threat Intelligence Analyst (TS/SCI Req)

Explore 142+ Cyber security engineer in Washington this April. Find roles across top companies and apply now to boost your career.