Senior Cyber Threat Analyst
Core
Developing and maintaining high-fidelity detection content, threat models, and intelligence integrations for a federal government SOC.
Role type
Senior IC threat detection engineer
Builds
Production detection rules, playbooks, and threat intelligence integrations
Domain
Federal government cybersecurity
Required skills
SIEM rule engineering, EDR platform management, threat modeling (STRIDE, ATT&CK), incident response workflow design, AI security monitoring, threat intelligence integration
Preferred skills
Agile/ITIL environment experience, cloud and on-premises security architecture collaboration
Technologies
SIEM, SOAR, EDR
Responsibilities
Develop detection use cases based on threat models and intelligence; Build and tune detection rules across SIEM and EDR platforms; Create playbooks for alert validation and incident response; Maintain threat models using STRIDE and ATT&CK methodologies; Assess emerging AI platform threats and develop monitoring controls; Collaborate with engineering teams to translate threat models into detection requirements; Support incident response activities and cyber exercises.
Seniority
Senior, hands-on IC