ICF

Threat Detection & Response Engineer, Senior (High Level Clearance Required)

ICF
Apply
25 days ago
Arlington, VA, USASenior

Base Salary

$119k - $203k/yr

Responsibilities

  • Oversee the design of operational cyber effects and countermeasure capabilities.
  • Evaluate technical alternatives and provide recommendations for cybersecurity design and development.
  • Translate mission requirements into software products, evolutionary prototypes, and advanced countermeasures.
  • Aggregate, store, correlate, and visually depict cybersecurity data.
  • Advise on data preparation, visualization, analytics implementation, and use of customer and ICF-developed capabilities.
  • Assess cyber tool usage and identify opportunities to improve analyst efficiency.
  • Identify tools and processes that address mission needs and translate improvement areas into functional requirements.
  • Identify technical training gaps and recommend hands-on or online approaches to improve tool and data usage.
  • Participate in post-engagement reviews and communicate progress and challenges to leadership.

Requirements

  • Bachelor’s degree with 12+ years of experience or master’s degree with 10+ years of experience in IT, cyber, engineering, or a related field.
  • At least 5 years of experience implementing custom, high-impact security platforms in critical program areas.
  • At least 5 years of experience with advanced cyber threats, threat hunting, incident response, investigations, and technical reporting.
  • At least 5 years of experience using network security analysis or intrusion detection system tools.
  • At least 5 years of experience analyzing packet capture and NetFlow data and understanding current cyber threats and trends.
  • At least 5 years of experience with malware, including detection methods, attack vectors, and exploited vulnerabilities.
  • Experience with SQL, KQL, or comparable query languages and with advanced dashboards such as Kibana or Splunk.
  • Experience with cybersecurity frameworks and knowledge bases for identifying known actors’ tactics, techniques, and procedures.
  • Understanding of the mathematics behind machine learning algorithms.
  • Active high-level security clearance and US citizenship are required.
  • Strong communication and interpersonal skills for explaining technical details to clients and leadership.
  • Preferred qualifications include Python or JavaScript scripting, Databricks Intelligence Platform experience, vulnerability management, Linux/Unix and Windows security, computer programming, SAFe experience, and CISSP certification.

Benefits

  • Primarily telework-based, with occasional meetings at client locations in Arlington, Virginia or Pensacola, Florida, or at ICF facilities in the Washington, DC metro area.
  • The role offers the opportunity to work on emerging technologies and contribute to a federal cyber analytics program from its beginning.
  • ICF provides an equal-opportunity workplace with reasonable accommodations available for disability, religious, and other qualifying needs.

Tech Stack

Apache HadoopApache KafkaDatabricksJavaScriptKibanaLinuxPythonSplunkSQLWindows

Categories

ICF

About ICF

10,000+ employees
Contact me