Technical Analyst

ICF seeks a highly motivated and proactive Technical Analyst to support a federal national security client. This role is a critical position on a high-performing, multi-disciplinary team. The Technical Analyst will be responsible for monitoring and analyzing cybersecurity threats by identifying vulnerabilities, assessing risks, and developing strategies to mitigate potential attacks. This role will also perform threat intelligence research, analyze patterns, and create actionable reports to safeguard organizational systems and data. The position is a hybrid role, and on-site work will be conducted in Arlington, VA.

Key Responsibilities:

• Contextualizes and enriches technical information (IP addresses/domains/file hashes/TTPs/etc.), using open-source and commercial data (e.g., VirusTotal, Censys.io, Shodan.io, Exploit-DB, etc.), client data holdings (netflow/asset management data/intelligence/etc.), and Intelligence (classified/partner insight/etc.); makes operational recommendations.

• Identifies anomalies in network and host data; identifies vulnerabilities in data streams based on CVE ID, CPE, and product names/versions and can extrapolate using alternative methods/sources (e.g., favicon, banner data, etc.). 

• Authors/maintains robust documentation in knowledge mgmt. portals (e.g., Confluence, JIRA, ServiceNow, etc.)

• Drafts technical reports/presentations; disseminates/present information to varying levels of understanding (e.g., key points to decision makers, details to analysts, etc.)

• Maps technical insights to the MITRE ATT&CK or other cyber frameworks.

• Performs open-source and intelligence (un/classified) research on client priorities and emerging events to enable the team with the most current operational picture.

• Leverages artificial intelligence (ChatGPT, Perplexity.ai, etc.) to increase productivity/complete simple tasks, while ensuring analytic integrity/accuracy.

• Engages with partners in technical settings to solicit new insights, collaborate on joint priorities, and provide additive technical/informational value.

• May author/update Python or other scripting language tooling (e.g., simple tooling to pull data via REST APIs, connect data sets together in analytic environments, etc.)

• Contribute to special projects and other duties as assigned.

Required Qualifications:

• U.S. Citizenship (required by federal government for position)

• 3 years of experience supporting a federal client in a program support capacity.

Additional Qualifications:

• Active DOD security clearance is preferred but not required

• Experience with Python or other scripting language tool

• Proficiency in MS Office Applications (SharePoint, Lists, PowerBI, Word, PowerPoint, Outlook, Teams, Excel)

• Customer service orientation with interpersonal, organizational, problem-solving, and strategic thinking skills

• Excellent oral and written communication skills

• Highly organized and detail-oriented

• Strong analytical, problem-solving, and decision-making capabilities

• Ability to work cohesively with clients, their customers, and internal ICF counterparts.

Preferred Qualifications:

• Bachelor’s degree in a relevant field, for example cybersecurity, information technology or 4 years equivalent experience

• Experience working in a classified environment.

• Ability to work well both individually and in a team environment.

• Ability to prioritize multiple tasks while demonstrating the initiative to complete projects with minimum supervision.

Working at ICF

ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.

We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy.