all source analyst mid Jobs in Washington

all source analyst mid

america's analyst

cyber defense analyst - senior Jobs in Washington

cyber defense analyst - senior

cyber defense forensics analysts - mid Jobs in Washington

cyber defense forensics analysts - mid

cyber defense incident responder - mid Jobs in Washington

cyber defense incident responder - mid

cybersecurity analyst

E Logic

<div>E-Logic will provide expert Cyber Security Analyst support to the U.S. Department of Education's Office of Inspector General (OIG). The analysts will safeguard OIG's IT infrastructure and data through continuous monitoring, vulnerability management, and compliance with OMB, NIST, and FedRAMP standards.
Responsibilities:<ul><li>
Implement, configure, and maintain security solutions (firewalls, intrusion detection/prevention, antivirus, SIEM, DLP).</li><li>
Monitor network and system logs to detect suspicious activity, threats, and vulnerabilities.</li><li>
Perform vulnerability scans, assessments, and remediation strategies.</li><li>
Apply and monitor security patches, updates, and configuration hardening.</li><li>
Investigate, troubleshoot, and resolve security incidents and Indicators of Compromise (IOCs).</li><li>
Assist in the development and enforcement of security policies, procedures, and guidelines.</li><li>
Conduct and support security audits, FISMA compliance reporting, and ATO assessment activities.</li><li>
Create and maintain Information Assurance artifacts, POA&amp;Ms, and cybersecurity documentation in GRCT.</li><li>
Participate in OIG cybersecurity meetings, capture meeting minutes, and support action item tracking.</li></ul>
Qualifications:<ul><li>
8+ years of experience as a Cybersecurity Analyst.</li><li>
Bachelor's degree in Computer Science, Information Systems, or related field.</li><li>
Advanced cybersecurity certifications such as CISSP, SSCP, CCSP, CEH, or CDPSE.</li><li>
Strong knowledge of NIST 800-53 Rev. 5 controls, FedRAMP baseline, OMB and DHS security policies.</li><li>
Expertise in vulnerability scanning, intrusion prevention, and data protection.</li></ul>
Important Notice: 
This role is part of a proposal for the U.S. Department of Education. Hiring is contingent upon the selection of the consultant. Selected candidates will be included in the proposal and must authorize the use of their resume for submission.</div>

Cyber Security Analyst

Arthrocyber

Full job descriptionAbout ArthrocyberArthrocyber LLC is a premier cybersecurity and IT solutions provider focused on defending enterprises and government organizations against today&rsquo;s most advanced cyber threats. We specialize in incident response, digital forensics, cyber defense, and proactive threat hunting. Our mission-driven team blends technical expertise with innovation to protect critical assets and deliver measurable results.Position OverviewArthrocyber LLC is seeking a Senior Cyber Defense Analyst to support advanced cybersecurity operations for a U.S. Government civilian agency. This role involves defending enterprise systems against nation-state and criminal adversaries by analyzing events, identifying intrusions, and implementing detection and response strategies. The analyst will provide senior-level expertise while mentoring junior analysts.This position requires an Active TS/SCI clearanceResponsibilities<ul><li>Strong written and verbal communication skills with excellent attention to detail</li><li>Ability to interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).</li><li>Ability to conduct independent analysis with minimal assistance on events generated by SIEM and individual security tools.</li><li>Ability to create custom detection rules to query log data for indicators of compromise.</li><li>Experience conducting security event analysis from beginning to end and determining root cause.</li><li>Experience creating and reviewing standard operating procedures with minimal supervision and oversight.</li><li>Ability to mentor junior personnel and provide guidance on analysis that may exceed the capabilities of junior analysts.</li><li>Knowledge of host/network access control mechanisms (e.g., access control list, capabilities lists).</li><li>Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).</li><li>Knowledge of incident response and handling methodologies.</li><li>Knowledge of incident categories, incident responses, and timelines for responses.</li><li>Knowledge of front-end collection systems, including traffic collection, filtering, and selection.</li><li>Experience with system administration, network, and operating system hardening techniques.</li><li>Knowledge of cyber defense and information security policies, procedures, and regulations.</li><li>Knowledge of the common attack vectors on the network layer.</li><li>Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).</li><li>In-depth understanding of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored).</li><li>Knowledge of various types of network communication (e.g., LAN, WAN, MAN, WLAN, WWAN).</li><li>Knowledge of file extensions (e.g., .dll, .bat, .zip, .pcap, .gzip).</li><li>Knowledge of front-end collection systems, including traffic collection, filtering, and selection</li><li>Develop content for cyber defense tools.</li><li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.</li><li>Coordinate with enterprise-wide cyber defense staff to validate network alerts.</li><li>Ensure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.</li><li>Document and escalate incidents (including event&rsquo;s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.</li><li>Perform cyber defense trend analysis and reporting.</li><li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.</li><li>Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.</li><li>Identify and analyze anomalies in network traffic using metadata.</li><li>Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools</li></ul>Required Skills &amp; Experience<ul><li>Active TS/SCI clearance</li><li>Bachelors degree or higher</li><li>6+ years&rsquo; experience in Network/data analysis, packet capture analysis, malware detection, custom intrusion signature development, advanced information assurance</li><li>Certifications addressing incident handling (identification, overview, and preparation) buffer overflow, client attacks, covering tacks (networks, systems), denial of service attaches, incident handing (containment, eradication, recovery, and lessons learned), network attacks, password attacks, reconnaissance, scanning (discovery and mapping, techniques and defense), session hijacking and cache poisoning, techniques for maintaining access, web applications attacks, worms, bots, and bot-nets</li></ul>Preferred Qualifications<ul><li>Experience in detecting host and network based intrusions via intrusion detection technologies (e.g., Snort).</li><li>Ability to analyze malware and conduct vulnerability scans and recognize vulnerabilities in security systems.</li><li>Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.</li><li>Experience evaluating the adequacy of security designs.</li><li>Skill in using incident handling methodologies.</li><li>Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies.</li><li>Experience with using protocol analyzers and collecting data from a variety of cyber defense resources.</li><li>Experience reading and interpreting signatures (e.g., snort).</li><li>Experience with assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)</li><li>Ability to accurately and completely source all data used in intelligence, assessment and/or planning products.</li><li>Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).</li></ul>Job Type: Full-timePay: From $105,000.00 per yearBenefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul>Security clearance:<ul><li>Top Secret (Required)</li></ul>Ability to Commute:<ul><li>Washington, DC 20230 (Required)</li></ul>Ability to Relocate:<ul><li>Washington, DC 20230: Relocate before starting work (Required)</li></ul>Work Location: In person

Cyber Defense Analyst - Senior

Leidos

<div>Description
The Digital Modernization Sector at Leidos currently has an opening for a UAM Investigative Team Analyst supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP). This is an exciting opportunity to use your experience to support, sustain, design and evolve the database backbone of the ITP. The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the DHS mission in safeguarding the homeland.
The selected candidate will be responsible for the following:<ul><li>
Examine, analyze, and search insider threat data to identify trends, patterns, and insights of potential insider threat indicators.</li><li>
Provide analytical, program support services related to the operation of UAM/ UEBA tool.</li><li>
Execute detailed and objective inquiry activities to assess behaviors suggestive of insider threat or misconduct.</li><li>
Utilize diverse data sources, analytical tools, and enterprise systems to identify behavior patterns and develop comprehensive inquiry reports and memoranda.</li><li>
Provide proactive insider threat-based investigations across the DHS enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.</li><li>
Recommend, coordinate, and facilitate mitigation actions in partnership with law enforcement, security, counterintelligence, human capital, and cybersecurity offices.</li><li>
Sustain personnel proficiency and knowledge development through cross-functional team rotations and documentation of best practices and standard operating procedures.</li><li>
Provide timely response to insider threat related events (within 4 hours during normal business hours and provide after-hour support). Normal business hours will be defined as 6am to 10pm Monday &ndash; Friday excluding weekends and scheduled holidays. Implement corrective actions to restore normal operations and prevent recurrence. This position is expected to eventually move to shift work to meet the requirement of 24x7 operations at an undetermined later date.</li></ul>
Basic Qualifications:
<ul><li>Bachelors degree and (12)+ years of prior relevant insider threat experience or Masters with (10)+ years of prior relevant experience. Additional years of experience with requisite certifications will be considered in leu of degree.</li><li>
Minimum of 6 years demonstrated knowledge of the intelligence cycle, processes, and organizations.</li><li>
Minimum 6 years demonstrated knowledge of various research tools and procedures and methods of analyzing, compiling, reporting and disseminating intelligence data and information.</li><li>
Minimum of 6 years demonstrated knowledge of research and analytical techniques as applied to difficult and complex assignments in security, law enforcement, and counterintelligence analysis.</li><li>
Minimum of 6 years demonstrated knowledge of Threat Assessment &amp; Mitigation Strategies.</li><li>
Have excellent writing skills to compile investigative reports, memos and SOPs.</li><li>
Possess a strong background in recommending, coordinating and facilitating mitigation actions with stakeholders.</li><li>
Previous Law Enforcement Experience.</li><li>
Possess a strong analytical background.</li><li>
Have excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.</li><li>
Possess the ability to plan, coordinate, research and analyze all-source intelligence information for accuracy, timeliness, and relevance to mission.</li><li>
Possess knowledge of current domestic and international threats to U.S. national security interests.</li><li>
Be adept at establishing networks with relevant security, personnel, and prevention stakeholders to foster program utilization.</li><li>
Be a self-starter capable of working independently to promote program goals.</li></ul><ul><li>
Advanced knowledge of User Activity Monitoring Software (UAM) and solutions.</li><li>
Advanced knowledge of Cybersecurity toolsets designed to support ITP mission activities.</li><li>
Advanced Knowledge of Open-Source toolsets.</li><li>
Working Knowledge of Insider Threat Frameworks; Pathway to Violence &amp; Critical Pathway.</li><li>
Current TS/SCI and Must be a US Citizen.</li><li>
Ability to obtain DHS EOD SCI and willingness to undergo CI Polygraph.</li></ul>
Preferred Qualifications:<ul><li>
Master&rsquo;s degree from an accredited college or university in Criminal Justice, Homeland security, Cyber Security, or related field</li></ul><ul><li>
Proven experience (10+ years) in Intelligence Analysis</li><li>
Experience with User Activity Monitoring products and platforms</li><li>
Credentialed Law Enforcement Officer/Investigator</li><li>
Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F)</li><li>
Certified Counter-Insider Threat Professional - Analysis (CCITP-A)</li><li>
Completion of Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC)</li><li>
Completion of Workplace Assessment of Violence Risk (WAVR-21) Workshop</li><li>
Completion of Center for Development of Security Excellence (CDSE) Curriculums; INT311.CU/INT312.CU/CI201.CU</li></ul>
At Leidos, we don&rsquo;t want someone who &quot;fits the mold&quot;&mdash;we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, &ldquo;what&rsquo;s next?&rdquo; before the dust settles on &ldquo;what&rsquo;s now.&rdquo;
If you&rsquo;re already scheming step 20 while everyone else is still debating step 2&hellip; good. You&rsquo;ll fit right in.<h2 class="jobSectionHeader">
Original Posting:</h2>
August 27, 2025 
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2 class="jobSectionHeader"> 
Pay Range:</h2>
Pay Range $101,400.00 - $183,300.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</div>

Job Posting Title Insider Threat Program Investigative Team Analyst

Bank of America

<div>Job Description:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. 
 
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates&rsquo; physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. 
 
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. 
 
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! 
The Cyber Threat Intelligence team works with partners, both internal and external, in order to reduce risk to the Bank and to the financial sector at large. The team provides timely situational awareness, conducts deep analysis of threats and translates indicators of threat into actionable information to reduce impact to the bank. Stakeholders include cyber-security response teams, internal lines of business, senior leadership and external organizations such as law enforcement, industry peers and intelligence sharing partners.
The Cyber Threat Intelligence Senior Analyst is responsible for conducting in-depth research, documentation, and intelligence analysis of key cyber threats to develop a comprehensive picture of the cyber threat landscape. This includes research via the use of various sources; development of historical, trend, and link analysis; and written and oral reporting to provide actionable intelligence. The analyst will also work to proactively research new threats and establish trends and patterns among existing attacks to help predict future risks.<div>
Responsibilities include, but are not limited to: 
<ul><li>Working in a tactical/strategic role cultivating intelligence sources, analyzing information, creating intelligence, and hunting for exposures or related incidents</li><li>Researching current and emerging threats, malware analysis, campaign assessment, data collection and analysis</li><li>Researching threat actors and cultivating and assessing new sources of threat information and intelligence</li><li>Collecting, assessing, and cataloguing threat indicators and responsibility for adding context to threat indicators to convey urgency, severity, and credibility</li><li>Risk management</li><li>Maintaining knowledge of threat landscape by monitoring OSINT and related sources</li><li>Tracking cyber threat actors and their infrastructure with a view to disrupting their activity</li><li>Collaborating with appropriate business partners and lines of business to analyze threats</li><li>Escalating issues to management in a timely manner with appropriate information regarding risk and impact</li><li>Exercising independent judgment in methods, techniques and evaluation criteria for obtaining results</li><li>Participating in technical bridge lines to facilitate the identification, mitigation and containment of cyber-security incidents</li><li>Drafting well-written analytical assessments and providing briefings to response teams, enterprise counterparts, and senior leadership on key issues</li><li>Mentoring and developing other analysts on the team</li></ul></div><div>
Required Qualifications: 
<ul><li>Experience as an intelligence analyst, and/or malware analyst is necessary</li><li>Technical or information security certifications are also strong plus</li><li>Excellent organizational and analytical skills</li><li>Ability to communicate (verbal and written) with executives and stakeholders in non-technical terms while accurately encompassing risk, impact, likelihood, containment and remediation activities, and threat actor techniques, tactics and procedures</li><li>Excellent written and verbal communication skills</li><li>Ability to juggle multiple work efforts in a fast-paced environment and to be able to quickly change direction as needed</li><li>Strong influencing skills</li><li>Ability to prioritize conflicting tasks</li><li>Proven experience with Information Security related activities</li><li>Experience in an operations focused information security role</li><li>Experience conducting analysis/investigation and containment of potential data breaches or cyber security incidents</li><li>Familiarity with security vulnerabilities, exploits, malware and digital forensics</li><li>Familiarity with network security vulnerabilities, exploits and attacks</li><li>Familiarity with most operating systems, particularly UNIX and Windows</li><li>Ability to work in a strong team-oriented environment with a sense of urgency and resilience whilst able to work independently</li><li>Ability to work effectively with technical and non-technical business owners</li><li>The candidate should exhibit a firm understanding of the cyber threat landscape.</li><li>The candidate should be knowledgeable of emerging technologies and trends and should be able to identify strategic trends that may impact the bank based on data from a wide variety of sources.</li><li>This person must have an inquisitive mindset and be able to translate raw data into actionable intelligence.</li></ul></div><div>
Desired Qualifications 
<ul><li>Minimum of 5 years of InfoSec experience tracking and reporting on cyber threats</li><li>College degree desired.</li><li>Advanced degree in International Affairs or similar field a strong plus.</li><li>Technical or information security certifications are also a strong plus.</li><li>Foreign language fluency (Russian/Arabic/Farsi/Chinese/Korean) desired.</li></ul></div>
This is a Senior analyst role so 8 years over all experience is desired.
This job will be open and accepting applications for a minimum of seven days from the date it was posted. 
Shift:
1st shift (United States of America)
Hours Per Week:
40</div>

Cyber Threat Intelligence Senior Analyst

About ArthrocyberArthrocyber LLC is a premier cybersecurity and IT solutions provider focused on defending enterprises and government organizations against today&rsquo;s most advanced cyber threats. We specialize in incident response, digital forensics, cyber defense, and proactive threat hunting. Our mission-driven team blends technical expertise with innovation to protect critical assets and deliver measurable results.Position OverviewWe are seeking a Cyber Defense Incident Responder &ndash; Mid to join our security operations team. This role requires a strong background in incident response, threat detection, malware analysis, and digital forensics. The successful candidate will play a key role in defending enterprise environments, supporting cyber defense operations, and leading efforts to remediate advanced security incidents.This position requires an Active clearanceResponsibilities<ul><li>Strong written and verbal communication skills.</li><li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored).</li><li>Knowledge of system administration, network, and operating system hardening techniques.</li><li>Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).</li><li>Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies.</li><li>Demonstrated ability to interact effectively with senior management and leadership.</li><li>Ability to design incident response for cloud service models.</li><li>Knowledge of incident categories, incident responses, and timelines for responses.</li><li>Knowledge of incident response and handling methodologies.</li><li>Knowledge of the common networking and routing protocols (e.g. TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.</li><li>Knowledge of Application Security Risks (e.g. Open Web Application Security Project Top 10 list)</li><li>Coordinate incident response functions.</li><li>Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.</li><li>Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.</li><li>Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security.</li><li>Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation.</li><li>Perform cyber defense trend analysis and reporting.</li><li>Perform initial, forensically sound collection of images and inspect to discern possible mitigation/remediation on enterprise systems.</li><li>Perform real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable Incident Response Teams (IRTs).</li><li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.</li><li>Track and document cyber defense incidents from initial detection through final resolution.</li><li>Employ approved defense-in-depth principles and practices (e.g., defense-in-multiple places, layered defenses, security robustness).</li><li>Collect intrusion artifacts (e.g., source code, malware, Trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.</li><li>Coordinate with intelligence analysts to correlate threat assessment data.</li><li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise.</li></ul>Required Skills &amp; Experience<ul><li>Active Secret clearance </li><li>Bachelor&rsquo;s degree or higher</li><li>5+ years&rsquo; experience in Malware analysis, digital forensics, data/network analysis, penetration testing, information assurance, leading incident handling</li></ul>Preferred Qualifications<ul><li>Experience identifying, capturing, containing, and reporting malware.</li><li>Skill in preserving evidence integrity according to standard operating procedures or national standards.</li><li>Strong securing network communications experience.</li><li>Recognizing and categorizing types of vulnerabilities and associated attacks.</li><li>Skill in protecting a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters).</li><li>Experience performing damage assessments.</li><li>Skill in using security event correlation tools and design incident response for cloud service models.</li></ul>Job Type: Full-timePay: From $90,000.00 per yearBenefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Flexible spending account</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul>Security clearance:<ul><li>Secret (Required)</li></ul>Ability to Commute:<ul><li>Washington, DC 20230 (Required)</li></ul>Ability to Relocate:<ul><li>Washington, DC 20230: Relocate before starting work (Required)</li></ul>Work Location: In person

Cyber Defense Incident Responder - Mid

About ArthrocyberArthrocyber LLC is a premier cybersecurity and IT solutions provider focused on defending enterprises and government organizations against today&rsquo;s most advanced cyber threats. We specialize in incident response, digital forensics, cyber defense, and proactive threat hunting. Our mission-driven team blends technical expertise with innovation to protect critical assets and deliver measurable results.Position OverviewArthrocyber LLC is seeking a Cyber Defense Forensics Analysts - Mid to support advanced cybersecurity operations for a U.S. Government civilian agency. This role requires solid experience in host- and network-based forensics, threat detection, and malware analysis. The successful candidate will contribute to investigations by applying strong technical skills, collaborating with senior team members, and ensuring the integrity of sensitive evidence throughout the process.This position requires an Active clearanceResponsibilities<ul><li>Strong written and verbal communication skills.</li><li>Create detections and automation to detect, contain, eradicate, and recover from security threats.</li><li>Develop new and novel defense techniques to identify and stop advanced adversary tactics and techniques.</li><li>Perform forensics on network, host, memory, and other artifacts originating from multiple operating systems, applications, or networks and extract IOCs (Indicators of Compromise) and TTPs (Tactics, Techniques, and Procedures).</li><li>Conduct proactive hunts through enterprise networks, endpoints, or datasets in order to detect malicious, suspicious, or risky activities that have evaded detection by existing tools.</li><li>Solid knowledge of TCP/IP networking, and network services such as DNS, SMTP, DHCP, etc.</li><li>Solid understanding of attacker tradecraft associated with email, app-based, cloud threats&#8239;and the ability to apply defensive tactics to protect against threats.</li><li>Good knowledge of&#8239;operating system internals, OS security mitigations, understanding of Security challenges in Windows, Linux, Mac, Android &amp; iOS&#8239;platforms</li><li>Experience using forensic tools (e.g., EnCase, Sleuthkit, FTK).</li><li>Ability to perform deep analysis of captured malicious code (e.g., malware forensics).</li><li>Skill in analyzing anomalous code as malicious or benign.</li><li>Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).</li><li>Incorporate agile, threat intelligence-driven or hypothesis-based threat hunting, and the MITRE ATT&amp;CK framework to identify and prioritize development of missing or ineffective detection capabilities to detect, prevent, and respond to cyber events originating from threat actors.</li></ul>Required Skills &amp; Experience<ul><li>Active Secret clearance or higher </li><li>Bachelor&rsquo;s degree or higher </li><li>5+ years&rsquo; performing cyber threat hunting and forensics support for incident response.</li><li>Certifications addressing identification of malicious system and user activity, incident response in an enterprise environment, timeline artifact analysis, timeline collection, timeline processing, volatile data collection, analysis of profiling of systems and devices, analysis of file and program activity, acquisition, preparation, and preservation of digital evidence, analysis of user communications, advanced IDS concepts, applications protocols, concepts of TCP/IP and the link layer, DNS, fragmentation, IDS fundamentals and initial deployment (e.g., snort, bro), IDS rules (e.g., snort, bro), IPv6, network architecture and event correlation, network traffic analysis and forensics, or packet engineering.</li></ul>Preferred Qualifications<ul><li>Experience in detecting host and network based intrusions via intrusion detection technologies (e.g., Snort).</li><li>Ability to analyze malware and conduct vulnerability scans and recognize vulnerabilities in security systems.</li><li>Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.</li><li>Experience evaluating the adequacy of security designs.</li><li>Skill in using incident handling methodologies.</li><li>Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies.</li><li>Experience with using protocol analyzers and collecting data from a variety of cyber defense resources.</li><li>Experience reading and interpreting signatures (e.g., snort).</li><li>Experience with assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)</li><li>Ability to accurately and completely source all data used in intelligence, assessment and/or planning products.</li><li>Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).</li></ul>Job Type: Full-timePay: From $100,000.00 per yearBenefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Flexible spending account</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul>Security clearance:<ul><li>Secret (Required)</li></ul>Ability to Commute:<ul><li>Washington, DC 20230 (Required)</li></ul>Ability to Relocate:<ul><li>Washington, DC 20230: Relocate before starting work (Required)</li></ul>Work Location: In person

Cyber Defense Forensics Analysts - Mid

Quotient

<div>Job Title: Mid-Senior Level General Developer &ndash; Evergreen
 
Company: Quotient
 
Location: D.C Metro Area / Hybrid
 
Travel: N/A 
Position Type: Full-Time 
Employee Type: FTE
 
Compensation Range: $90,000-$120,000 
Clearance Requirements: Top Secret Clearance (Ability to Obtain and Maintain) 
 
 
 
Company Overview: 
 
Quotient is a leading provider of customized information technology solutions, specializing in systems integration, full-stack software development, cybersecurity, project management, and operational support. We serve a diverse range of clients, including federal agencies, defense, civilian communities, and commercial customers across the United States. As a subsidiary of Virtual Technologies Group (VTG), Quotient continues to uphold its reputation as one of the most innovative, respected, and ethical providers of technology solutions. We provide growth and opportunity for our team while delivering exceptional value to our clients. 
 
Position Overview
 
 
We&rsquo;re seeking adaptable, experienced developers who thrive in fast-paced environments and enjoy solving complex problems with clean, scalable code. Whether your expertise lies in PHP, Java, Python, or C#, we value your ability to think critically, communicate effectively, and collaborate across diverse teams. This role supports sensitive projects, so candidates must be eligible for a U.S. Top Secret security clearance. 
 
Minimum Qualifications<ul><li>
Bachelor&rsquo;s degree in computer science, Software Engineering, or a related technical field</li></ul><ul><li>
Proficiency in at least one of the following languages: PHP, Java, Python, or C#</li><li>
Strong foundation in Git, HTML, CSS, and JavaScript</li><li>
Experience with relational databases such as: MySQL, MariaDB, PostgreSQL, Oracle, or SQL Server</li><li>
Excellent critical thinking and communication skills</li><li>
Ability to work independently and in collaborative environments</li><li>
U.S. citizenship and ability to obtain and maintain a Top-Secret security clearance</li></ul>
Preferred Qualifications<ul><li>
Experience with modern frameworks (e.g., Laravel, Spring Boot, Django, .NET Core)</li></ul><ul><li>
Familiarity with cloud platforms (AWS, Azure, GCP)</li><li>
Knowledge of CI/CD pipelines and DevOps practices</li><li>
Exposure to containerization tools like Docker or Kubernetes</li><li>
Contributions to open-source projects or active GitHub profile</li></ul> 

Why Join Us? 
At Quotient we provide more than just IT consulting solutions&mdash;we offer a dynamic environment where you can learn, grow, and expand your skillset. As a leading managed services, cybersecurity, and IT consulting firm, we support a diverse range of customers, giving you the opportunity to tackle unique challenges and stay ahead in a rapidly evolving industry. 
 
Join a team that values innovation, collaboration, and professional development. Whether you're looking to sharpen your technical expertise, work with cutting-edge technology, or make a real impact, we&rsquo;re committed to helping you build a rewarding career. 
 
Benefits Overview:
 
VTG offers a comprehensive benefits package to meet the needs of our employees and their families. Benefits include medical insurance plans, dental insurance, vision insurance, health savings accounts (HSA), flexible spending accounts (FSA), life insurance, short and long-term disability insurance, paid time off and holidays, and a 401(k) with employer match.
 
 
EEO Statement: 
Quotient is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive, respectful environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other legally protected status. 
 
We believe that diversity strengthens our team and drives innovation. All employment decisions are based on qualifications, merit, and business needs. If you require reasonable accommodation during the application or interview process, please contact recruit@quotient-inc.com. 

lRogGEXz6R</div>

Mid-Senior Level General Developers – Evergreen

Explore 20+ Cybersecurity analyst in Washington this September. Find roles across top companies and apply now to boost your career.