analyst

business analyst

business intelligence analyst Jobs in Washington

business intelligence analyst

computer systems analyst Jobs in Washington

computer systems analyst

cyber defense analyst - senior Jobs in Washington

cyber defense analyst - senior

cybersecurity analyst

Tyto Athene

<div>Description:
<div>
Tyto Athene is searching for a part time <b>Tier 2 Weekend Day Shift Incident Response Analyst (IR)</b> to support a law enforcement customer in Washington, DC. Our IR analysts form the backbone of our cybersecurity services. You will play a critical role in securing our customers by monitoring our tools, triaging alerts, and investigating potential cyber threats. As a SOC team member, you will also serve as the initial point of contact for cybersecurity incidents, ensuring prompt and effective responses.We provide a supportive environment for you to learn from senior SOC team members, cross-train for other positions, and attend external training. We want to see you grow and improve your cybersecurity skills. Join us and delve into the complexities of monitoring enterprise networks, learn basic incident response techniques, and how to effectively investigate phishing threats against our clients.</div><div></div><div><b><br>
Responsibilities:</b></div><ul><li>
Utilize security tools to analyze, investigate, and triage security alerts</li><li>
Monitor our customers environments, including cloud and SaaS solutions for evidence of adversarial activity</li><li>
Perform in-depth analysis and investigation of high-priority cybersecurity incidents</li><li>
Utilize advanced tools, such as host based digital forensics or malware analysis capabilities, to identify incidents&rsquo; root causes, scope, and impact</li><li>
Collaborate with cyber threat hunting and cyber threat intelligence teams</li><li>
Participate in the development, implementation, and tuning of the SOC tools detection content and alerting signatures.</li><li>
Accurately document triage findings, and intake reports of external cybersecurity events from SOC customers via phone or email in the SOCs Incident Management System(IMS)</li><li>
Learn new open and closed-source investigative techniques</li><li>
Perform research into emerging threats and vulnerabilities to aid their prevention and mitigation</li><li>
Help shape the evolution of processes and procedures of the SOC</li><li>
Provide guidance and mentorship to Tier 1 SOC Analysts to enhance their skills and capabilities</li></ul>
Qualifications:
<div><b>
Required:</b></div><ul><li>
Minimum of four (4) years of cybersecurity experience with at least three (3) years in a SOC watch floor analyst or IR role</li><li>
Bachelor&rsquo;s Degree or higher in Cybersecurity or related is preferred</li><li>
Experience in some of the following tools and technologies :i.e. SIEM experience required with Sumo Logic/Splunk preferred.</li><li>
Knowledge of common attacker tools, techniques and procedures (TTP)</li><li>
Experience with major cloud service provider offerings</li><li>
Knowledge of malware</li><li>
Knowledge of enterprise architecture including zero trust principles</li><li>
Knowledge of Windows and Unix operating systems</li><li>
Knowledge of common phishing techniques and how to investigate them</li><li>
Proficiency in technical writing</li><li>
Able to accurately and succinctly convey information through speaking, email, and presentations</li><li>
Comfortable in customer facing environments</li><li>
Ability to maintain a positive customer service mentality</li></ul><div><b>
Desired:</b></div><ul><li>
Previous SOC or incident response experience</li><li>
CISSP or CEH certification; additional experience, formal training, certifications, and/or education may be substitutable at the client's discretion</li><li>
Working knowledge of regex and scripting languages</li><li>
Any SOC analyst relevant certifications such as those from GIAC or CompTIA</li><li>
The initiative to ask for assistance and offer fresh ideas to improve the SOC&rsquo;s performance</li></ul><div><b>
Shift:
</b></div><ul><li>Part-time Weekend Day Shift (Saturday-Sunday/6am-6pm)</li></ul><div><b>
Clearance:</b></div><ul><li>
TS/SCI eligibility required to start</li></ul><div><b>
Location:</b></div><ul><li>
This position is required to be on client site</li></ul>
About Tyto Athene:
<div><b>
Compensation:</b></div><ul><li>
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $45.00-$55.00/hr. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.</li></ul><div><b>
Benefits:</b></div><ul><li>
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.</li></ul><div></div><div><br>
Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains&mdash;Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT&mdash;empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.</div><div>
</div><div>
At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?</div><div>
</div><div>
Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.</div></div>

Part-Time Tier 2 Incident Response Analyst

ValidaTek

<div>Company Overview: At ValidaTek, we modernize and optimize IT services to solve some of the most critical challenges facing federal civilian and defense agencies. From customers to partners to top-talent employees, ValidaTek puts people first, empowering them to exceed expectations and transform government organizations. Our success starts and ends with our people, so we built a company where great people can do great things, with the resources and autonomy to make decisions that transform organizations. We operate as one team of diverse people, united by a passion for continuous growth and optimization. Our commitment to quality and performance optimization is the reason why our IT Service Projects and New Development Projects have been appraised at CMMI Maturity Level 5, positioning us as one of a handful of elite companies to receive the highest form of third-party validation. www.validatek.com Summary:
<div>
The Senior Information Assurance Specialist plays a pivotal role in safeguarding the cybersecurity posture of a DHS-affiliated program. This position is responsible for designing, developing, and implementing advanced cybersecurity methodologies, tools, and policy frameworks to ensure the confidentiality, integrity, and availability of critical systems and data. Core responsibilities include intrusion detection and prevention, secure software/system design, reverse engineering, vulnerability assessments, and data protection strategies.</div><div>
The specialist ensures that all cybersecurity architectures, risk management practices, standards, and operational controls align with enterprise IT strategies and DHS cybersecurity requirements. This role also involves conducting risk assessments, compliance audits, and forensic investigations in response to cyber incidents, while shaping the evolution of the program&rsquo;s security ecosystem.</div><div><b>
** This role requires an on-site presence Monday - Friday from 9:00am - 5:00pm**</b></div>
Responsibilities:
<ul><li><div>
Design and implement cybersecurity controls, architectures, and risk mitigation strategies that align with DHS policies and frameworks (e.g., NIST 800-53, RMF, FISMA).</div></li><li><div>
Develop tools and techniques for threat detection, incident response, and vulnerability remediation, including malware analysis and reverse engineering.</div></li><li><div>
Monitor networks and systems for security breaches, analyze logs and alerts, and investigate anomalies using modern forensic and analytical tools.</div></li><li><div>
Lead development and testing of disaster recovery and continuity of operations (COOP) plans to ensure mission resilience.</div></li><li><div>
Recommend and deploy secure hardware and software solutions; design and manage firewalls, encryption protocols, and access control measures.</div></li><li><div>
Contribute to enterprise-wide security awareness, training, and user education initiatives to promote a culture of cyber vigilance.</div></li><li><div>
Stay abreast of emerging technologies, threat vectors, and security trends; integrate findings into the security strategy.</div></li><li><div>
Provide expert guidance to program leadership on risk posture, mitigation priorities, and investment strategies in cybersecurity capabilities.</div></li></ul><ul><li><div><b>
Knowledge:</b> Contributes to and shapes advanced cybersecurity concepts, frameworks, and standards. Applies deep subject matter expertise to evolving challenges.</div></li><li><div><b>
Problem Solving:</b> Develops innovative solutions to complex, high-impact cyber threats and architectural challenges.</div></li><li><div><b>
Discretion/Latitude:</b> Operates with broad autonomy; defines goals, priorities, and methodologies with minimal oversight.</div></li><li><div><b>
Impact:</b> Decisions and recommendations directly influence the security, continuity, and regulatory compliance of mission-critical DHS operations.</div></li><li><div><b>
Liaison/Leadership:</b> Serves as a trusted technical advisor to program and agency leadership. May lead cybersecurity projects, task orders, or cross-functional teams.</div></li></ul>
Qualifications:
<ul><li><div>
Bachelor&rsquo;s degree in Computer Science, Information Security, Engineering, or a related technical field. Experience can be substituted in lieu of bachelor's degree.</div></li><li><div>
Minimum of 8 years of progressively responsible experience in cybersecurity or information assurance.</div></li><li><div>
Extensive knowledge of cybersecurity frameworks and standards (e.g., NIST RMF, FISMA, FedRAMP).</div></li><li><div>
Demonstrated experience with security tools and platforms (e.g., SIEM, IDS/IPS, endpoint protection, forensics tools).</div></li><li><div>
Must be able to obtain and maintain a Top Secret/SCI security clearance.</div></li><li>
Must be able to obtain DHS EOD suitability. Start date will be established once EOD suitability has been received.</li><li>
This role performs onsite Monday - Friday from 9:00am - 5:00pm.</li></ul>
Posted Min Pay Rate: USD $120,000.00/Yr. Posted Max Pay Rate: USD $155,000.00/Yr. Salary Disclosure: Actual salary will be based on a variety of factors including but not limited to experience, geographic location, contract affordability, internal equity, education, and certifications. The upper end of the salary range may be reserved for individuals who have demonstrated tenure with the company, seniority, and proven excellent performance. This includes factors such as education, certifications, and extensive/unique experience beyond what is required. EEO Statement: ValidaTek is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, or disability status. Applicants who are selected for employment will be required to verify authorization to work in the United States. Offers of employment will be contingent upon passing a post-offer background check.</div>

Senior Information Assurance Specialist

<div><div>ECS is seeking a <b><i>Cyber Defense Analyst - Senior </i></b>to work in our <b><i>Washington, DC </i></b>office. <b>Please Note:</b><b> This position is contingent upon additional funding.</b>
</div><p></p><p>ECS Federal is a rapidly growing information security and information technology company in Washington, DC. We are looking to hire a <b>Senior Cyber Defense Analyst</b> to support a full range of cyber security services on a long-term contract in <b>Washington DC</b>. The position is full time/permanent and will support a US Government civilian agency. The position is available immediately upon finding a qualified candidate with the appropriate background clearance.</p>
<p>
</p><p><b>Job Requirements:</b></p>
<ul>
<li>Strong written and verbal communication skills with excellent attention to detail</li>
<li>Ability to interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).</li>
<li>Ability to conduct independent analysis with minimal assistance on events generated by SIEM and individual security tools.</li>
<li>Ability to create custom detection rules to query log data for indicators of compromise.</li>
<li>Experience conducting security event analysis from beginning to end and determining root cause.</li>
<li>Experience creating and reviewing standard operating procedures with minimal supervision and oversight.</li>
<li>Ability to mentor junior personnel and provide guidance on analysis that may exceed the capabilities of junior analysts.</li>
<li>Knowledge of host/network access control mechanisms (e.g., access control list, capabilities lists).</li>
<li>Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).</li>
<li>Knowledge of incident response and handling methodologies.</li>
<li>Knowledge of incident categories, incident responses, and timelines for responses.</li>
<li>Knowledge of front-end collection systems, including traffic collection, filtering, and selection.</li>
<li>Experience with system administration, network, and operating system hardening techniques.</li>
<li>Knowledge of cyber defense and information security policies, procedures, and regulations.</li>
<li>Knowledge of the common attack vectors on the network layer.</li>
<li>Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).</li>
<li>In-depth understanding of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored).</li>
<li>Knowledge of various types of network communication (e.g., LAN, WAN, MAN, WLAN, WWAN).</li>
<li>Knowledge of file extensions (e.g., .dll, .bat, .zip, .pcap, .gzip).</li>
<li>Knowledge of front-end collection systems, including traffic collection, filtering, and selection</li>
<li>Develop content for cyber defense tools.</li>
<li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.</li>
<li>Coordinate with enterprise-wide cyber defense staff to validate network alerts.</li>
<li>Ensure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.</li>
<li>Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.</li>
<li>Perform cyber defense trend analysis and reporting.</li>
<li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.</li>
<li>Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.</li>
<li>Identify and analyze anomalies in network traffic using metadata.</li>
<li>Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).</li>
<li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.</li>
</ul>
<p></p><p>*6+ years of relevant work experience required*</p>
<p>
</p><p><i>Salary Range: $107,000 - $124,000</i></p>
<p><i>
General Description of Benefits</i></p>
Requirements:
<ul><li><b><i>Bachelors degree or higher</i></b></li>
<li>6+ years' experience in Network/data analysis, packet capture analysis, malware detection, custom intrusion signature development, advanced information assurance</li>
<li>Certifications addressing incident handling (identification, overview, and preparation) buffer overflow, client attacks, covering tacks (networks, systems), denial of service attaches, incident handing (containment, eradication, recovery, and lessons learned), network attacks, password attacks, reconnaissance, scanning (discovery and mapping, techniques and defense), session hijacking and cache poisoning, techniques for maintaining access, web applications attacks, worms, bots, and bot-nets</li>
<li><b><i>Active TS/SCI clearance</i></b></li>
</ul>
<br>
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Cyber Defense Analyst - Senior

Elyon International

<div><p><b>WHO WE ARE:</b></p><p><br>
<b>
ELYON</b> provides the Program Management for its Channel of Commercial Technology companies in Government that consist of Small Businesses and New Technology start-ups.</p><p><br>
<b>
ELYON</b> advocates for policies that can improve government services and maintain our government's competitive advantage, by bringing more technology into government programs.</p><p></p><p><b><br>
ELYON</b> advocates on behalf of our nation's innovative, new technology and small businesses looking to work with the U.S. government. We do this by aligning the voice of our small business members with advocacy for change in federal policy that will make the government market more accessible to small businesses and the commercial technology ecosystem.</p><p></p><p><br>
The Channel's founding Technical Board Members include former government leaders and IT executives passionate about bringing best-of-breed technology to the government.</p><p></p><p><br>
We are seeking a skilled and experienced <b>Cyber Forensic Analyst II</b> to join our team!</p><p></p><p><br>
Successful ELYON employees possess the following traits:</p><p></p><p><br>
An ability to get things done: You are persistent, resourceful, results-oriented, and action oriented. You constantly plan ahead and foresee issues before they occur.</p>
<p>
Analytical: In order to improve your comprehension of the market and the demands and problems of your clients, you have good analytical abilities and are at ease reading quantitative data.</p>
<p>
Creative mind-set: You are able to solve problems creatively and swiftly adjust. You possess a thorough understanding of product management principles and the ability to apply them when analysing data and making recommendations.</p>
<p>
Emotional Intelligence: You have a strong sense of self and excellent perception of how important relationships function. You are upbeat, sympathetic, adaptable, and inquisitive. Your genuineness, warmth, and competence help you win the respect of your co-workers.</p>
<p>
Trustworthy: You have a strong sense of morality, principles, and purpose. You are trustworthy because of how you conduct yourself. You are a living example of the company's values.</p><br>
<p></p>
<p><b>
Position Description:</b></p>
<p>
We are seeking a highly skilled <b>Cyber Forensic Analyst</b> to support high-impact investigative and intelligence missions involving cybercrime, cryptocurrency, and financial crime. You will work alongside federal agency teams, partner law enforcement agencies, and regulatory bodies to conduct technical and financial investigations. This role requires expertise in analyzing complex cyber threats, blockchain transactions, digital assets, and hidden wealth strategies.</p>
<p>
You&rsquo;ll need to bring both analytical rigor and a tenacious, detail-oriented mindset to help us trace digital breadcrumbs in support of critical investigations across national security and criminal enforcement efforts.</p><p></p><p><b><br>
Multiple options: Washington DC Region, Miami FL and remote.</b></p><p></p><p><b><br>
Key Responsibilities</b></p>
<p><b>
Cybercrime Investigative Case Support</b></p>
<p>
Work directly on cases with a cyber nexus in collaboration with law enforcement teams and external partners, using advanced investigative tools and techniques:</p>
<ul>
<li>Conduct <b>cryptocurrency tracing and analysis</b> using blockchain forensics tools.</li>
<li>Gather and analyze <b>dark web intelligence</b> to identify threat actors, forums, and illicit activity.</li>
<li>Perform <b>data analytics</b> to uncover patterns, relationships, and anomalies.</li>
<li>Analyze <b>electronic evidence</b>, including servers, hard drives, communications, and OSINT sources.</li>
<li>Draft subpoenas targeting <b>financial institutions and cryptocurrency exchanges</b>.</li>
<li>Participate in inter-agency meetings with law enforcement, prosecutors, and other stakeholders.</li>
<li>Identify overlapping financial transactions and alternative stores of wealth, such as:</li>
<li>Prepaid and store gift cards</li>
<li>Monetary instruments</li>
<li>NFTs and digital assets</li>
<li>Cold/public crypto wallets</li>
<li>High-end real estate and luxury goods</li></ul><br>
<p></p>
<p><b>
Cyber-Financial Investigative Support</b></p>
<p>
Assist in comprehensive financial tracing operations involving both fiat and digital currencies:</p>
<ul>
<li>Analyze bank records, wire transfers, and credit card transactions to track illicit funds.</li>
<li>Draft targeted subpoena requests to financial institutions and crypto platforms.</li>
<li>Participate in investigative interviews under agency direction.</li>
<li>Identify and correlate layered financial networks and hidden asset channels.</li>
<li>Apply knowledge of financial laws and frameworks, including:</li>
<li>Bank Secrecy Act (BSA)</li>
<li>Asset Forfeiture practices</li>
<li>Money Laundering statutes</li>
<li>OFAC and sanctions compliance</li></ul><br>
<p></p>
<p><b>
Required Qualifications</b></p>
<ul>
<li><b>4+ years of direct experience</b> in cybercrime investigations, blockchain analysis, or digital forensics.</li>
<li><b>Security Clearance Required: Active Secret or above preferred</b></li>
<li>Proven experience with <b>cryptocurrency investigations</b>, darknet operations, or forensic platforms (e.g., Chainalysis, TRM, CipherTrace).</li>
<li>Familiarity with <b>financial investigative techniques</b>, including subpoena processes and transactional analysis.</li>
<li>Strong working knowledge of <b>cyber law, digital evidence handling, and financial crime statutes</b>.</li>
<li>Excellent interpersonal and written communication skills; ability to draft clear, concise, and actionable reports.</li>
<li>Ability to work independently in a fast-paced, mission-driven environment.</li></ul><p></p><p><br>
<br>
<b>Preferred Qualifications</b></p>
<ul>
<li>Prior experience supporting federal investigations preferred (FBI, DHS, IRS-CI, HSI, etc.).</li>
<li>Certifications such as <b>CFE, CFCE, GCFA, CFCI, or CAMS</b></li>
<li>Familiarity with blockchain intelligence platforms and open-source investigation tools.</li>
<li>Understanding of evolving technologies in digital assets and cyber-enabled crime.</li></ul><br>
<p></p>
<p><b>
Why Join Us</b></p>
<ul>
<li>Work on <b>cutting-edge investigations</b> with national impact.</li>
<li>Collaborate with elite teams fighting complex financial and cyber threats.</li>
<li>Opportunity for <b>professional growth</b>, certifications, and hands-on casework.</li>
<li>Competitive salary, benefits, and mission-driven culture.</li></ul><br>
<p></p>
<p><b>
Benefits:</b><br>
<br>
Paid sick leave, Medical/Dental (optional), 401 (k) Retirement Plan (optional), Employer Paid Life Insurance, Employer Paid Short Term Disability, Optional Life Insurance.<br>
<br>
ELYON International, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.</p></div>

Cyber Forensic Analyst II

MANTECH

<div><p><b>MANTECH </b>seeks a motivated, career and customer-oriented <b>Senior Cybersecurity Engineer</b> to join our team working in the <b>Washington, D.C. Navy Yard. </b>This is a <b>hybrid</b> position requiring 3 days on-site, 2 days remote.</p><p><b><br>
Responsibilities include but are not limited to:</b></p><ul><li><p>
Reviewing testing and validation to ensure system functionality and compliance with security standards</p></li><li><p>
Developing technical documentation including schematics, specifications, and system architecture diagrams</p></li><li><p>
Participating in engineering reviews, audits, and program milestone meetings</p></li><li><p>
Assist with Participating Acquisition Resource Manager (PARMs) in getting Air Transfer Office (ATO) for aircraft carriers systems</p></li><li><p>
Work with SEA 03 concerning Cybersecurity of Aircraft Carrier systems</p></li><li><p>
Provide technical support in system engineering design, network architecture and system security development to support platform-based network integration, information technology and communications for cybersecurity in accordance with NIST Framework, JCIDS System Survivability, DoD 8500 series, DoD Cybersecurity Test &amp; Evaluation (T&amp;E), Cyber Threat Intelligence, Navy Cybersafe, Navy Information Assurance /Technical Authority Board standards and NAVSEA Enclave policy</p></li><li><p>
Support efforts in cybersecurity for the definition of system security requirements, risk assessments, systems analysis, systems design, cybersecurity T&amp;E, assessment and authorization</p></li><li><p>
Provide cybersecurity Risk Management Framework (RMF) support</p></li><li><p>
Serve as a subject matter expert in the validation of the implementation of cybersecurity requirements for device, sub-system, system, enclave and platform</p></li><li><p>
Recommend systems hardening solutions to increase operational survivability and resilience to operational risk to the mission for device, sub-system, system, enclave and platform</p></li><li><p>
Provide engineering recommendations and support the integration of T&amp;E into the identification and development of device, sub-system, system, enclave and platform level cybersecurity specification and requirements for implementation into the ship design</p></li><li><p>
Support the phasing and fielding of cybersecurity for existing systems to future needs and trends through planned integration of the necessary cyber related architectural features and tools to protect the confidentiality, integrity and availability of the systems, networks platform mission and operation</p></li></ul><p></p><p><b>
Minimum Qualifications:</b></p><ul><li><p>
Master&rsquo;s degree in Computer Science, Electrical Engineering, or Mathematics with concentration in Computer Science</p></li><li><p>
10+ years of professional experience in Computer Design, Software Development or Computer Network Security</p></li><li><p>
Must be able to obtain an IAT Level III Cert: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP, or, an IASAE Level III Cert: CISSP-ISSAP, CISSP-ISSEP, or CCSP within 6 months of onboarding</p></li><li><p>
Experience supporting U.S. Navy programs or operations</p></li><li><p>
Experience in Cybersecurity or Cyber Defense engineering and management</p></li></ul><p></p><p><b>
Preferred Qualifications:</b></p><ul><li><p>
7 of the 10 minimum years of required of experience focused in Cyber security, Cyber Defense engineering, and Management</p></li><li><p>
CISM or CCIE Certification</p></li></ul><p></p><p><b>
Clearance Requirements:</b></p><ul><li><p>
Must be a U.S. Citizen and possess an active or current Top Secret clearance.</p></li></ul><p></p><p><b>
Physical Requirements:</b></p><ul><li><p>
Must be able to remain in a stationary position 50%</p></li><li><p>
Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.</p></li><li><p>
Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.</p></li><li><p>
Must be able to exchange accurate information in these situations</p></li></ul></div><p></p>

Senior Cybersecurity Engineer

<div><p>ECS is seeking a <b><i>Cyber Defense Threat Hunt and Forensics Analysts Sr. </i></b>to work in our <b><i>Washington, DC </i></b>office. <b>Please Note:</b><b> This position is contingent upon additional funding.</b></p>
<ul>
<li>Identify threat tactics, methodologies, gaps, and shortfalls aligned with the MITRE ATT&amp;CK Framework and the Azure Threat Research Matrix (ATRM).</li>
<li>Perform Hypothesis-based or Intelligence-based Cyber Threat Hunts to identify threats and risks within environments.</li>
<li>Use cloud-native techniques and methods to identify and create threat detections for automated response activities.</li>
<li>Use Agile methodology to organize intelligence, hunts and project status.</li>
<li>Be able to independently research intelligence reports to find actionable data for conducting intel or hypothesis-based hunts.</li>
<li>Explore and correlate large data sets to uncover novel attack techniques, monitor and catalog changes in activity group tradecraft, and investigate alerts for enterprise customers.</li>
<li>Conduct analysis of log files, evidence, and other information to determine the best methods for identifying the perpetrator(s) of a network intrusion.</li>
<li>Confirm what is known about an intrusion and discover new information, if possible, after identifying intrusion via dynamic analysis.</li>
<li>Create a forensically sound duplicate of the evidence (i.e., forensic image) that ensures the original evidence is not unintentionally modified, to use for data recovery and analysis processes.</li>
<li>Provide a technical summary of findings in accordance with established reporting procedures.</li>
<li>Ensure that chain of custody is followed for all digital media acquired in accordance with the Federal Rules of Evidence.</li>
<li>Recognize and accurately report forensic artifacts indicative of a particular operating system.</li>
<li>Extract data using data carving techniques (e.g., Forensic Tool Kit [FTK], Foremost).</li>
<li>Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.</li>
</ul>
<p></p><p><i>Salary Range: $107,000 - $130,000</i></p>
<p><i>
General Description of Benefits</i></p>
Requirements:
<ul><li>Strong written and verbal communication skills.</li>
<li>Create detections and automation to detect, contain, eradicate, and recover from security threats.</li>
<li>Develop new and novel defense techniques to identify and stop advanced adversary tactics and techniques.</li>
<li>Perform forensics on network, host, memory, and other artifacts originating from multiple operating systems, applications, or networks and extract IOCs (Indicators of Compromise) and TTPs (Tactics, Techniques, and Procedures).</li>
<li>Conduct proactive hunts through enterprise networks, endpoints, or datasets in order to detect malicious, suspicious, or risky activities that have evaded detection by existing tools.</li>
<li>Advanced knowledge of TCP/IP networking, and network services such as DNS, SMTP, DHCP, etc.</li>
<li>Solid understanding of attacker tradecraft associated with email, app-based, cloud threats and the ability to apply defensive tactics to protect against threats.</li>
<li>Advanced knowledge of operating system internals, OS security mitigations, understanding of Security challenges in Windows, Linux, Mac, Android &amp; iOS platforms</li>
<li>Experience using forensic tools (e.g., EnCase, Sleuthkit, FTK).</li>
<li>Ability to perform deep analysis of captured malicious code (e.g., malware forensics).</li>
<li>Skill in analyzing anomalous code as malicious or benign.</li>
<li>Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).</li>
<li>Incorporate agile, threat intelligence-driven or hypothesis-based threat hunting, and the MITRE ATT&amp;CK framework to identify and prioritize development of missing or ineffective detection capabilities to detect, prevent, and respond to cyber events originating from threat actors.</li>
</ul>
<p>Certifications/Licenses:</p>
<ul>
<li><b><i>Bachelor's degree or higher</i></b></li>
<li>10+ years' performing cyber threat hunting and forensics support for incident response.</li>
<li>Certifications addressing identification of malicious system and user activity, incident response in an enterprise environment, timeline artifact analysis, timeline collection, timeline processing, volatile data collection, analysis of profiling of systems and devices, analysis of file and program activity, acquisition, preparation, and preservation of digital evidence, analysis of user communications, advanced IDS concepts, applications protocols, concepts of TCP/IP and the link layer, DNS, fragmentation, IDS fundamentals and initial deployment (e.g., snort, bro), IDS rules (e.g., snort, bro), IPv6, network architecture and event correlation, network traffic analysis and forensics, or packet engineering.</li>
<li><b><i>Active Secret clearance</i></b></li>
<li>5+ years of experience in digital forensics and incident response and threat hunt activities;</li>
<li>Core Competencies in Computer Forensics, Computer Network Defense, Software Testing and Evaluation, System Administration, and Threat Analysis;</li>
<li>All access to classified information will be within government controlled secure facilities.</li>
</ul>
<br>
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Threat Hunt and Forensics Analyst - Senior

Leidos

<div><p><b>Description</b><br>
</p><br>
<br>
Job Description<p><br>
In this rapidly evolving world, Leidos is always looking for new ways to disrupt the status quo, go to market faster, and optimize customer experiences. We&rsquo;re seeking an experienced <b>Senior Power Apps Developer &ndash; Lead</b> who can bring creative ideas to solve complex problems, both technical and procedural, to the team. The ability to be adaptable and to work constructively with a technically diverse and geographically separated team is crucial. You will work as an integral part of an Agile Scrum team &ndash; a highly productive team of technical professionals who thrive on supporting the customer's mission and growth objectives through Agile software development. You will work in close collaboration with team members, other product teams, shared services teams such as enterprise applications, product owners, cybersecurity, and other stakeholders within Agile methodologies.</p><p></p><p>
The ideal candidate will have <b>experience building complex PowerApps model-driven applications and Portal using Microsoft Power Platform technologies</b>. As an Agile Scrum team member, you will write tasks and tests related to a specific user story to ensure requirements are met within standards. You will accurately estimate assigned work and report status and barriers at daily Scrum team sessions.</p><p></p><p><b>
Candidate MUST:</b></p><p>
Be currently located in <b>MD/Northern VA/DC area</b> for hybrid/onsite work (onsite 2 days a week)</p><p>
Be US Citizen or US Person (Green Card Holder) with the ability to obtain a level 4 Public Trust Clearance.</p><p></p><p><b>
Responsibilities:</b></p><ul><li>
Technical lead of the Agile team.</li><li>
Lead Power Apps developer utilizing &ldquo;model-driven&rdquo; design.</li><li>
Develop client facing web site and forms utilizing PowerApps Portal.</li><li>
Maintain application baseline in 3 environments (Dev/Stage/PROD).</li><li>
Work with the Enterprise Architecture team to perform process modelling and develop data validation processes.</li><li>
Work with system stakeholders to capture data requirements for each process model.</li><li>
Ensure application processes stay in sync with business processes.</li><li>
Participate in Scrum ceremonies, including sprint planning, review, and retrospective meetings.</li><li>
Assist Business Analyst in the development and technical evaluation of requirements.</li><li>
Lead Integrated Product Teams (IPT).</li></ul><p></p><p><b>
Basic Qualifications</b></p><ul><li><b>
Active Public Trust Clearance or Ability to obtain a Public Trust Clearance</b></li><li><b>
Bachelor&rsquo;s Degree and a minimum of 12years of related technical experience.</b></li><li><b>
Minimum of 3 years managing an agile software development team</b></li><li><b>
MUST have experience supporting the federal government.</b></li><li><b>
Experience in managing a software development team within an AGILE methodology.</b></li><li>
Good written and verbal communication skills.</li><li>
Strong collaboration skills and desire to work within a team.</li><li>
Ability to work in a fast paced, constantly changing environment.</li><li>
Experience and comfort leading a high-performing team of developers.</li><li>
Experience building product roadmaps that align with customer strategic objectives.</li><li>
Works well with limited oversight.</li></ul><p></p><p><b>
Required Technical Skills</b></p><ul><li>
Expert developing and maintaining applications using Microsoft Power Platform suite (Model-driven and Canvas App, Power BI, Power Automate, Power Pages/Portals, Portal Management MDA, Power Apps Pipeline) in an Azure environment.</li><li>
Expert in developing reports, charts and graphs using Power BI.</li><li>
Solid experience with transforming data architecture using the Dataverse data platform.</li><li>
Experience building and maintaining data tables in Dataverse.</li><li>
Development with technologies such as C#, JavaScript, HTML/CSS, Liquid, FetchXML.</li><li>
Expert in with Power Apps Pipeline for moving apps between tiers.</li><li>
Expert in large scale data management and data modeling.</li><li>
Expert in providing status briefings and product demonstrations to customers.</li><li>
Expert in translating customer requirements into functional requirements for the application (User Stories / Backlog Items).</li><li>
Support new user requirements and assist with planning new features for future releases.</li><li>
Lead development efforts.</li></ul><p></p><p><b>
Preferred Qualifications/Skills</b></p><ul><li>
AI experience</li><li>
PowerBI experience.</li><li>
Experience with designing and implementing data models in A365.</li><li>
Experience developing SharePoint customized apps using Power Apps.</li><li>
Design and develop data exchanges in accordance with the System Interface Agreements.</li><li>
Experience developing modern pages on SharePoint Online.</li></ul><p></p><p>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.</p><p></p><h2 class="jobSectionHeader"><b>
Original Posting:</b></h2>
September 16, 2025<p></p><p><br>
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.</p><p></p><h2 class="jobSectionHeader"><b><br>
Pay Range:</b></h2>
Pay Range $126,100.00 - $227,950.00<p></p><p>
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</p></div>

Sr Software Applications Lead (PowerPlatform)

Explore 32+ Cybersecurity analyst in Washington this September. Find roles across top companies and apply now to boost your career.