Cybersecurity Threat Analyst Subject Matter Expert IV

Alexandria, VA, US • Posted 9 hours ago • Updated 9 hours ago

Full Time

On-site

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

Cyber Security
Documentation
Enterprise Networks
SIEM
Advanced Analytics
Management
Incident Management
Security Engineering
System On A Chip
Reporting
Leadership
Mentorship
IT Management
Training
Analytics
Threat Analysis
Network
Analytical Skill
DoD
IC
Internal Communications
Integrated Circuit
Security Clearance
Continuous Integration

Summary

Title: Cybersecurity Threat Analyst Subject Matter Expert IV

Location: Alexandria, VA

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Job Details:

Serve as the senior technical authority for proactive threat hunting and adversary-focused analysis within the SOC
Lead development of the SOC threat-hunting methodology, hunt lifecycle, prioritization model, documentation standards, quality criteria, and integration with watch operations and engineering
Proactively search across enterprise network, endpoint, identity, SIEM, and other security telemetry for indicators of compromise and behavioral evidence of malicious activity that has evaded automated detection
Develop and direct advanced hunt campaigns based on threat intelligence, adversary TTPs, mission priorities, predictive/advanced analytics, environmental changes, incidents, and identified detection gaps
Assess and validate analytical or predictive models and determine whether identified patterns represent meaningful adversary behavior, benign activity, or require additional collection and analysis
Lead complex analytical pivots across multiple sources and enclaves and direct expansion of scope when evidence indicates broader adversary activity
Ensure actionable hunt findings are transitioned to incident response, watch operations, detection engineering, or security engineering with clear evidence and recommended actions
Provide senior technical input to daily/weekly SOC reporting, leadership briefings, threat assessments, and defensive priorities
Establish reusable hunt playbooks, analytical techniques, ATT&CK mappings, queries, knowledge repositories, and lessons-learned processes
Mentor threat analysts at all levels and provide technical leadership for exercises, training, and proficiency development
Identify telemetry and detection blind spots and work with engineering teams to improve collection, analytics, enrichment, and automated detection coverage

Requirements:

Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree

Minimum of eight (8) years of relevant experience in addition to education level
Expert-level hands-on experience in threat hunting, adversary analysis, advanced cyber defense analysis, or closely related work
Demonstrated experience leading complex hunt campaigns and identifying malicious activity not detected through routine alerting
Expert knowledge of adversary TTPs, MITRE ATT&CK, threat intelligence operationalization, network/endpoint/identity telemetry, and analytical methodologies
Experience establishing or materially improving a threat-hunting or proactive cyber-defense program
Experience translating hunt findings into detection engineering requirements and measurable defensive improvements
Must possess current DoD 8570 IAT II or IAM II certification
Experience working in a DoD or IC environment
Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 90789821
Position Id: 5cfd1f72fe1178f7ed4f8434cb28976b
Posted 9 hours ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Senior Cybersecurity Threat Hunter III

Alexandria, Virginia

•

Today

Title: Senior Cybersecurity Threat Hunter Location: Alexandria, VA Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph Job Details: Lead complex, hypothesis-driven threat hunts across multiple enterprise data sources and enclaves to identify sophisticated or previously undetected adversary activityProactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded autom

Full-time

Cybersecurity Threat Analyst

Alexandria, Virginia

•

Today

Title: Cybersecurity Threat Analyst I Location: Alexandria, VA Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph Job Details: Support proactive threat analysis and hunt activities using established hypotheses, queries, procedures, and data sourcesProactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automated security controlsAssess and correlate data fro

Full-time

Cybersecurity Threat Hunter II

Alexandria, Virginia

•

Today

Title: Cybersecurity Threat Hunter II Location: Alexandria, VA Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph Job Details: Independently conduct hypothesis-driven threat hunts across available enterprise telemetry to identify malicious or anomalous activity not detected by automated controlsProactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automat

Full-time

Senior Cybersecurity Defense Analyst III

Alexandria, Virginia

•

Today

Title: Senior Cyber Defense Analyst Location: Alexandria, VA Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph Job Details: Perform and lead advanced investigation of complex security events and incidents across network, endpoint, identity, firewall, vulnerability, and other available telemetryPerform cyber defense incident triage, including validation, enrichment, determination of scope, urgency, potential impact, and appropriate escalationSupport incident handling acr

Full-time

Search all similar jobs

More jobs at Invictus International Consulting in Alexandria, VA