Cyber Triage Analyst

Cyber Triage Analyst:
Long-term with Insight Global
Location: based out of Arlington, VA (100% onsite)
Rate: $40-48/hour
Clearance: TS/SCI

Role Overview:
• Serves as a frontline cyber defense analyst for the JCDC.
• Performs initial analysis and triage of cyber threat reports, IOCs, and incident notifications.
• Functions as a Tier 1/2 SOC analyst with enhanced threat intelligence responsibilities.
• Expected to independently research cyber activity, assess information, develop conclusions, identify gaps, and recommend actions.
• Requires strong coordination with government and private sector partners.
Responsibilities:
• Triage and assess incoming cyber threat tickets, incident reports, and IOC submissions.
• Analyze technical data (IP addresses, domain names, file hashes, network traffic, malware artifacts).
• Determine threat severity, credibility, and potential impact to critical infrastructure.
• Enrich IOCs using threat intelligence platforms, OSINT, and government resources.
• Prepare concise triage reports with actionable recommendations.
• Route tickets to appropriate JCDC teams, CISA divisions, or interagency partners.
• Coordinate with sector-specific analysts and interagency liaisons for context.
• Maintain accurate documentation in ticketing systems and knowledge management platforms.
• Participate in shift handoffs and daily operational briefings.
• Support development of triage playbooks and SOPs.
• Monitor emerging threat campaigns and adversary activity.
• Provide feedback to submitters and partners on ticket status.
Required Skills:
• U.S. Citizenship.
• Active TS/SCI clearance.
• Ability to obtain DHS Suitability.
• 2-4 years of progressive experience in threat intelligence, SOC operations, or cyber incident response.
• Collaborative work ability across physical locations.
• Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline from an accredited college or university.
• OR HS Diploma & 4+ years of directly relevant technical experience.
• Security+, CySA+, GCIH, GCIA, or similar certifications.
Desired Skills:
• Prior experience in federal government cybersecurity roles (CISA, FBI, NSA, DoD).
• Understanding of the CISA National Cyber Incident Scoring System (NCISS).
• Knowledge of general attack stages (foot printing, enumeration, gaining access, etc.).
• Experience recognizing and categorizing vulnerabilities and attacks.
• Knowledge of Computer Network Defense policies, procedures, and regulations.
• Familiarity with different operational threat environments (script kiddies, non-nation-state, nation-state).
• Knowledge of system and application security threats and vulnerabilities (buffer overflows, XSS, SQL injections, etc.).
• Experience with SIEM platforms, Threat Intelligence Platforms (TIPs), and ticketing systems.
• Knowledge of critical infrastructure sectors and cyber risks.
• Familiarity with DHS/CISA products and services.
_____________________________________________________________________________________
*Exact compensation may vary based on several factors, including skills, experience, and education. Employees in this role will enjoy a comprehensive benefits package starting on day one of employment, including options for medical, dental, and vision insurance. Eligibility to enroll in the 401(k) retirement plan begins after 90 days of employment. Additionally, employees in this role will have access to paid sick leave and other paid time off benefits as required under the applicable law of the worksite location.