Technical Analyst

ICF is a mission-driven company filled with people who care deeply about improving the lives of others and making the world a better place. We are fearless in finding new ways to solve problems, relentless in making sure it pays off for our clients and committed to making a positive change in the world. Join our community of mission-driven creatives, communicators, strategists, and technologists to challenge the status quo.

ICF seeks a highly motivated and proactive Technical Analyst to support a federal national security client. This role is a critical position on a high-performing, multi-disciplinary team. The Technical Analyst will be responsible for monitoring and analyzing cybersecurity threats by identifying vulnerabilities, assessing risks, and developing strategies to mitigate potential attacks. This role will also perform threat intelligence research, analyze patterns, and create actionable reports to safeguard organizational systems and data. The position is a hybrid role, and on-site work will be conducted in Arlington, VA.

Key Responsibilities:

• Contextualizes and enriches technical information (IP addresses/domains/file hashes/TTPs/etc.), using open-source and commercial data (e.g., VirusTotal, Censys.io, Shodan.io, Exploit-DB, etc.), CISA data holdings (netflow/asset management data/intelligence/etc.), and Intelligence (classified/partner insight/etc.); makes operational recommendations.

• Identifies anomalies in network and host data; identifies vulnerabilities in data streams based on CVE ID, CPE, and product names/versions and can extrapolate using alternative methods/sources (e.g., favicon, banner data, etc.).

• Authors/maintains robust documentation in knowledge mgmt. portals (e.g., Confluence, JIRA, ServiceNow, etc.)

• Drafts technical reports/presentations; disseminates/present information to varying levels of understanding (e.g., key points to decision makers, details to analysts, etc.)

• Maps technical insights to the MITRE ATT&CK or other cyber frameworks.

• Performs open-source and intelligence (un/classified) research on JCDC priorities and emerging events to enable the team with the most current operational picture.

• Leverages artificial intelligence (ChatGPT, Perplexity.ai, etc.) to increase productivity/complete simple tasks, while ensuring analytic integrity/accuracy.

• Engages with JCDC partners in technical settings to solicit new insights, collaborate on joint priorities, and provide additive technical/informational value.

• May author/update Python or other scripting language tooling (e.g., simple tooling to pull data via REST APIs, connect data sets together in analytic environments, etc.)

• Contribute to special projects and other duties as assigned.

Required Qualifications:

• U.S. Citizenship (required by federal government for position)

• 3 years of experience supporting a federal client in a program support capacity.

Additional Qualifications:

• Active DOD security clearance is preferred but not required

• Experience with Python or other scripting language tool

• Proficiency in MS Office Applications (SharePoint, Lists, PowerBI, Word, PowerPoint, Outlook, Teams, Excel)

• Customer service orientation with interpersonal, organizational, problem-solving, and strategic thinking skills

• Excellent oral and written communication skills

• Highly organized and detail-oriented

• Strong analytical, problem-solving, and decision-making capabilities

• Ability to work cohesively with clients, their customers, and internal ICF counterparts.

Preferred Qualifications:

• Bachelor’s degree in a relevant field, for example cybersecurity, information technology or 4 years equivalent experience

• Experience working in a classified environment.

• Ability to work well both individually and in a team environment.

• Ability to prioritize multiple tasks while demonstrating the initiative to complete projects with minimum supervision.

Working at ICF

Originally posted on Himalayas