Mid Cybersecurity Incident Analyst

Location: Arlington, Virginia, United States (Hybrid)

Salary: $140,000–$160,000 per year

Company

hirify.global provides cybersecurity and technical engineering support for government and critical-infrastructure missions, including CISA's JCDC Operations.

What you will do

• Analyze active cyber incidents, events, vulnerabilities, adversarial tactics, and mitigation strategies across IT, OT/ICS, cloud, and AI environments.
• Develop written guidance and targeted recommendations for active and emerging cyber threats and vulnerabilities.
• Define critical data sources, write detection rules, and research indicators of compromise and attack.
• Map technical threat insights to MITRE ATT&CK and other cybersecurity frameworks.
• Support threat hunting and incident response capability development across CISA, federal agencies, critical infrastructure, and state, local, tribal, and territorial partners.
• Tailor technical recommendations and practical solutions to the needs and operational constraints of different stakeholder groups.

Requirements

• Active Top Secret clearance.
• US citizenship and the ability to obtain and maintain DHS suitability EOD/Public Trust.
• At least 6 years of experience in threat intelligence, cybersecurity, incident response, or a related field.
• Strong computer and network fundamentals, with knowledge of computer architecture, operating systems, vulnerabilities, and encryption.
• Experience defining data sources, writing detection rules, researching threats, and producing analytical written summaries.
• Excellent written and oral communication skills, with knowledge of current cyber threats, exploits, attack methodologies, and detection techniques.

Nice to have

• Experience with Python, APIs, automation, Linux, Windows, Elasticsearch, AI/ML, and anomalous-behavior detection.
• Familiarity with FISMA, government cyber mission requirements, MITRE ATT&CK, and related frameworks.
• Threat intelligence reporting experience and the ability to communicate complex cybersecurity topics to executives, SOC teams, and other stakeholders.
• Cybersecurity certifications such as CTIA, CEH, GREM, GCIH, or GCFA.

Culture & Benefits

• Hybrid work supporting a mission-focused cybersecurity team.
• Collaboration with CISA, government agencies, critical-infrastructure organizations, and industry partners.
• Opportunity to support real-time cyber defense, threat hunting, and incident response capabilities.
• Employee benefits are available.