Title: Incident Manager IIISALARY RANGE: $94,000-$112,000
Onsite - 100%
Description:The
Senior Cyber Triage Analyst serves as a technical subject matter expert within the triage function, handling complex threat intelligence assessments while mentoring junior analysts and serving as a technical liaison to interagency partners. This role combines advanced technical analysis capabilities with strategic thinking and partnership coordination, ensuring high-quality threat assessments inform national cyber defense priorities.
Eligibility:- Must be aUS Citizen
- Must have anactive TS/SCIclearance
- Must be able to obtainDHS Suitabilityprior to starting employment
- 5-7 years of progressive experience in threat intelligence, SOC operations, or cyber incident response
Responsibilities Include:- Conduct advanced triage and analysis of complex, high-severity cyber threat intelligence, and IOC packages
- Serve as technical escalation point for challenging or ambiguous threat assessments requiring deep expertise
- Perform sophisticated IOC enrichment using classified and unclassified intelligence sources
- Coordinate directly with FBI, NSA, USCYBERCOM, and other interagency partners on joint threat assessments
- Provide technical mentorship and training to mid-level and junior triage analysts
- Develop and refine analytical tradecraft, triage playbooks, and decision matrices
- Lead special projects to enhance triage processes, automation, and threat detection capabilities
- Author detailed threat assessments and intelligence briefs for JCDC leadership and partner organizations
- Represent the triage team in interagency working groups and information-sharing forums
- Identify patterns across multiple threat reports to detect emerging campaigns or threat actor activity
- Conduct quality review of analyst products and provide constructive feedback
- Support after-hours on-call rotation for critical incidents requiring senior-level triage assessment
- Contribute to strategic planning for JCDC operational capability development
- Interface with critical infrastructure sector partners to understand threat concerns and provide tailored analysis
Required Skills:- Demonstrated expertise in malware analysis, threat actor attribution, and cyber campaign analysis
- Advanced proficiency with threat intelligence platforms, SIEM tools, and analytical frameworks
- Deep knowledge of MITRE ATT&CK framework and intelligence-driven cyber defense concepts
- Proven track record coordinating with federal agencies and managing complex stakeholder relationships
- Strong understanding of critical infrastructure interdependencies and sector-specific threats
- Exceptional analytical writing skills with ability to communicate complex technical findings to diverse audiences
- Experience briefing technical and non-technical audiences, including senior leadership
- Must be able to work collaboratively across physical locations
Desired Skills: - Prior experience in federal government cybersecurity roles (CISA, FBI, NSA, DoD)
- Experience the CISA NCISS National Cyber Incident Scoring System to be able to prioritize triaging of incident
- Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.)
- Demonstrated experience with recognizing and categorizing types of vulnerabilities and associated attacks- Knowledge of Computer Network Defense policies, procedures, and regulations
- Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)
- Published threat intelligence research or contributions to open-source security community
- Experience with threat hunting and proactive threat detection methodologies
- Knowledge of foreign adversary cyber capabilities and geopolitical threat landscape
- Familiarity with Privacy Act and information handling requirements for government operations
Desired Certifications: CISSP, GCTI, GCFA, GREM, or similar advanced certifications
Required Education: Bachelor of Science degree in a technical discipline from an accredited college or university in Computer Science, Cybersecurity, Computer Engineering, or related discipline; or High School Diploma &
7+ years of directly relevant technical experience. Master's degree is preferred.
