Lead Cyber Threat Analyst

DirectViz Solutions, LLC
Washington, DC, United States
about 2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Languages
English
Job source

Tech stack

Cyber Security Computer Networks Intrusion Detection and Prevention Information Systems Security Architecture Professional Software Vulnerability Management Software Security Cyber Threat Analysis Information Technology Operational Systems

Job description

The Lead Cyber Threat Analyst serves as the technical and operational lead for enterprise cybersecurity operations, overseeing approximately 63 systems and ensuring compliance with all federal security standards. This role is responsible for driving the organization’s threat detection, analysis, and response strategy, leading the Computer Security Incident Response Center (CSIRC), and managing enterprise security monitoring tools within the Enterprise Security Operations Center (ESOC).

The position requires deep expertise in cybersecurity frameworks, threat intelligence, and vulnerability management, combined with strong leadership, analytical, and communication skills to guide analysts, coordinate incident response, and safeguard sensitive financial and operational systems., * Lead enterprise-wide cybersecurity operations across ~63 systems, ensuring continuous protection and compliance with federal security standards.

  • Oversee daily security monitoring, analysis, and response activities within the Enterprise Security Operations Center (ESOC).
  • Direct 24/7 Computer Security Incident Response Center (CSIRC) operations, including incident triage, containment, and recovery.
  • Develop and maintain comprehensive security documentation, including System Security Plans (SSPs), Privacy Impact Assessments (PIAs), and Risk Management Framework (RMF) artifacts.
  • Conduct annual Security Control Assessments (SCAs) and perform evaluations for new systems and applications.
  • Identify, track, and remediate vulnerabilities and risks across enterprise environments.
  • Develop and maintain a real-time Cyber Threat Dashboard for senior leadership reporting and situational awareness.
  • Lead the Vulnerability Management Program, including prioritization, patching, and remediation oversight.
  • Monitor and analyze network traffic for potential intrusions, unauthorized activity, and anomalous behavior.
  • Manage security tools, threat intelligence feeds, and automation solutions supporting the ESOC mission.
  • Provide training, mentoring, and technical guidance to cybersecurity analysts and SOC staff.
  • Oversee incident handling involving Personally Identifiable Information (PII) and ensure proper documentation and escalation.
  • Collaborate with cross-functional and government stakeholders to align operations with NIST, FISMA, and organizational security policies.
  • Support the protection and compliance of financial systems under the OCFO through proactive risk management.
  • Maintain system and application security posture, ensuring ongoing compliance and operational integrity.

Requirements

At DVS, we recognize that our employees are our number one resource. If you are a problem-solving people-person, apply today!, * Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.

  • Minimum of 10 years of progressive IT or technology experience, including at least 5 years within the past decade supporting large-scale federal technical contracts.
  • At least 7 years of cybersecurity experience, with 5 years focused on threat analysis in SOC or CSIRC environments supporting government systems.
  • Required Certification: Certified Information Systems Security Professional (CISSP).
  • Preferred Certifications: GIAC Certified Intrusion Analyst (GCIA), Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+).
  • Required: Information Technology Infrastructure Library (ITIL) 4 Foundation certification.
  • Strong understanding of cybersecurity frameworks and principles (NIST 800-53, FISMA, RMF, ISO 27001).
  • Proven experience with enterprise risk management, incident response, and vulnerability remediation.
  • Excellent analytical and problem-solving skills, with strong attention to detail.
  • Effective communication and interpersonal skills to collaborate across technical, executive, and federal teams.
  • Ability to lead multiple projects simultaneously and deliver results under tight deadlines.

Physical and Mental Qualifications:

  • Be able to maintain awareness during scheduled working hours.
  • Prolonged periods sitting or standing at desk and working on a computer (mouse and keyboard)
  • Able to lift up to 15 pounds.
  • Excellent verbal and written communication; good command of the English language
  • Execute tasks independently and work as a team.
  • Learns and memories routine tasks.
  • Strong organizational, grammar, business correspondence, and self-management skills
  • Candidates must be able to perform the essential functions of the position satisfactorily. If requested, reasonable accommodation will be provided for employees with disabilities.
  • DVS retains the right to change or assign other duties to this position.

Benefits & conditions

DirectViz Solutions, (DVS) is a rapidly growing government contractor that provides strategic services that meet mission IT needs for government customers. DVS provides innovative information technology solutions to government clients through the knowledge and expertise of our dedicated employees. DVS is an employee-centric employer that provides competitive compensation, comprehensive medical plans, 401k match, PTO accrual, professional development reimbursement, corporate-funded technology certifications, and employee recognition and appreciation programs.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on dice.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

1:18 min

Evaluating distributed computation networks for AI model execution

Idan Gazit · Coffee With Developers

1:30 min

The universal and shared team responsibility of software security

Julia Wilson Julia Wilson +1 · WWC 2025

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all