Bachelor's degree in Cybersecurity, IT, Computer Science, Intelligence Studies, or related field, or equivalent experience
5+ years in information architecture, data architecture, or records management
3+ years in cybersecurity environments, ideally in SOC operations or threat hunting
Familiarity with federal records management compliance frameworks
Responsibilities
Design and implement information architecture frameworks for threat hunting and cybersecurity operations
Develop data taxonomies and metadata standards for cybersecurity data
Create data models and information flow diagrams aligned with MITRE ATT&CK
Establish data governance policies for sensitive cybersecurity information
Develop and maintain records management policies compliant with federal requirements
Gather and analyze business requirements from cybersecurity teams
Conduct gap analysis for information management capabilities
Benefits
Top Secret Clearance
Comprehensive training and guidance on information architecture and records management procedures
Opportunities for collaboration with cybersecurity professionals
Engagement in continuous monitoring and data analytics initiatives
Support for professional development in cybersecurity and information management
Full Job Description
Everforth ECS is seeking a Information Architect / Records Management Business Analyst (TS) to join our team in Arlington, VA (Hybrid).
Position Overview
The Information Architect / Records Management Business Analyst will support the CISA Technical Engineering Support Services (TESS) contract, working within the Cybersecurity Division to design, implement, and maintain information architecture and records management frameworks that support threat hunting and cybersecurity operations. This role requires a Top Secret clearance and combines technical expertise in data architecture with business analysis capabilities to ensure efficient data organization, accessibility, and compliance across threat hunting operations.
Key Responsibilities
Information Architecture
Design and implement information architecture frameworks to support threat hunting, cyber threat intelligence (CTI), and security operations
Develop data taxonomies, classification schemes, and metadata standards for cybersecurity data and threat intelligence
Create data models and information flow diagrams that support MITRE ATT&CK framework alignment and threat detection workflows
Establish data governance policies and procedures for handling sensitive cybersecurity information and threat indicators
Architect solutions for data integration across multiple security tools and platforms used in threat hunting operations
Records Management
Develop and maintain records management policies compliant with federal requirements (NARA, FISMA, and CISA-specific guidelines)
Implement records retention schedules for threat hunt data, incident reports, and cybersecurity artifacts
Ensure proper handling, storage, and disposition of classified and sensitive cybersecurity records
Coordinate with CISA stakeholders on information lifecycle management for threat intelligence and security event data
Maintain audit trails and documentation for compliance with federal cybersecurity mandates
Business Analysis
Gather and analyze business requirements from threat hunters, SOC analysts, and cybersecurity teams
Translate technical and operational needs into information architecture requirements
Conduct gap analysis between current and desired state information management capabilities
Develop process improvement recommendations for data handling and records management workflows
Create documentation including business requirements, functional specifications, and user guides
Collaboration & Stakeholder Engagement
Work closely with threat hunting teams, CTI analysts, and SOC personnel to understand data needs
Collaborate with IT security engineers and system administrators on technical implementations
Provide training and guidance to end-users on information architecture standards and records management procedures
Support continuous monitoring and data analytics initiatives across CISA cybersecurity programs
Salary Range: $120,000 - $140,000
General Description of Benefits
Top Secret Clearance
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, or related field, or equivalent experience.
Experience
Minimum 5 years of experience in information architecture, data architecture, or records management
At least 3 years of experience in cybersecurity environments, preferably supporting SOC operations, threat hunting, or incident response
Experience with federal records management requirements and compliance frameworks
Demonstrated experience with data governance, metadata management, and taxonomy development
Experience working with cybersecurity data sources (SIEM logs, threat intelligence feeds, endpoint data, network traffic)
Technical Skills
Proficiency with data modeling tools and techniques
Understanding of cybersecurity concepts including threat hunting, MITRE ATT&CK framework, and SOC operations
Familiarity with security tools and platforms (SIEM, SOAR, threat intelligence platforms, EDR solutions)
Knowledge of data formats and structures used in cybersecurity (JSON, XML, STIX/TAXII, CEF, etc.)
Experience with data visualization and analytics tools (Elastic Stack, Splunk, or similar)
Analytical & Business Skills
Strong business analysis capabilities including requirements gathering and process improvement
Excellent documentation skills with ability to create clear technical and business documentation
Experience with project management and stakeholder engagement
Strong communication skills for both technical and non-technical audiences
About ECS
ECS is a leading provider of digital solutions and services to the federal government. The company was founded in 2001 by Roy Kapani and has since grown to become a trusted partner to a wide range of government agencies. ECS offers a broad range of services, including cloud computing, cybersecurity, and artificial intelligence. The company has been recognized for its innovative solutions and has won numerous awards, including the AWS Public Sector Partner of the Year award.
