491 Analytics jobs in Alexandria,VA

The pay range for this position is $55.00 - $60.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Medical, dental & vision

Critical Illness, Accident, and Hospital

401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available

Life Insurance (Voluntary Life & AD&D; for the employee and dependents)

Short and long-term disability

Health Spending Account (HSA)

Transportation benefits

Employee Assistance Program

Time Off/Leave (PTO, Vacation or Sick Leave)

The team operates 100% onsite at the Mark Center during normal business hours, Monday through Friday, 0600–1800.

Bachelor's degree in cybersecurity, information technology, computer science, intelligence studies, or a related technical discipline

8+ years of relevant experience

4+ years of experience supporting cybersecurity operations, cyber threat intelligence, threat hunting, incident response, cyber network defense, or a closely related cyber mission.

Active Top Secret security clearance.

Must meet DoD 8140 IAT Level II baseline certification requirements before starting work

Possess, or obtain and maintain within the required program timeframe, a DoD 8140 CSSP Analyst (CSSP-A) certification.

Demonstrated experience applying MITRE ATT&CK;, Cyber Kill Chain, or comparable frameworks to characterize adversary activity, TTPs, attack lifecycles, vulnerabilities, malware behaviors, and indicators.

Hands-on experience conducting hypothesis-driven threat hunts, developing detection logic and analytic queries, and pivoting from external threat reporting, IOCs, and OSINT to internal enterprise telemetry.

Demonstrated experience querying, analyzing, and correlating high-volume SIEM, EDR, endpoint, network, NetFlow, packet, log, and other host- or network-based security data

Working knowledge of TCP/IP, common ports and protocols, network traffic flow, OSI model, system administration, defense-in-depth, and enterprise security architecture

Ability to work 100% onsite at the Mark Center during normal business hours

Schedule flexibility may be required to support mission requirements

Additional relevant experience, cybersecurity education, or industry certifications may be substituted for a degree.

TS/SCI eligibility, including eligibility for reciprocal acceptance, preferred.

Advanced cybersecurity certifications, such as CISSP, CASP+, CySA+, CEH, GIAC GCIH, GCIA, GCED, GCTI, or comparable credentials.

Experience supporting DISA, Department of Defense networks, Cyber Security Service Provider operations, Cyber Protection Teams, or a large enterprise SOC.

Experience conducting threat hunting and cyber investigations across NIPRNet, SIPRNet, JWICS, cloud, commercial, or similarly complex enterprise environments.

Experience using SIEM, EDR, threat-intelligence, and network-analysis tools—such as Splunk, Elastic, Microsoft Defender for Endpoint, Microsoft Sentinel, Google Threat Intelligence, VirusTotal, Wireshark, PCAP, and NetFlow—to develop or tune correlation searches, detection rules, signatures, threat blocks, analytic queries, dashboards, and automated enrichment workflows.

Familiarity with commercial threat-intelligence platforms; malware analysis; digital and network forensics; endpoint telemetry; intrusion detection; vulnerability research; cloud security; and intelligence-driven defense methodologies, including MITRE ATT&CK; and Cyber Kill Chain.

Familiarity with query languages and scripting tools, such as SPL, KQL, Lucene, SQL, Python, PowerShell, and Unix/Linux command-line utilities.

Experience producing intelligence products, operational reports, and executive briefings for executives, General Officer/Flag Officer, Executive Service, or equivalent leadership

Demonstrated ability to lead complex cyber investigations or threat hunts and mentor junior technical staff