JCDC Cyber Triage Analyst

Job Title: JCDC Cyber Triage Analyst
Location: Arlington, VA (Onsite)
Clearance: Active TS/SCI Clearance Required
Company: Quantum Science Solutions (QSS)
Compensation: Open Rate
________________________________________
Position Overview
Quantum Science Solutions (QSS) supports a customer providing rapid deployment and management of secure cloud-based engagement environments for cyber incident response and threat hunting operations. The program enables cybersecurity analysts to quickly access the tools and environments needed to investigate threats affecting federal agencies, state and local governments, and critical infrastructure.
We are seeking an JCDC Cyber Triage Analyst to perform initial analysis and triage of cyber threat reports, indicators of compromise (IOCs), and incident notifications submitted to the Joint Cyber Defense Collaborative (JCDC).
This is not a developmental position. The successful candidate will operate similarly to a Tier 1/2 SOC analyst with additional threat intelligence responsibilities and will be expected to independently research cyber activity, assess available information, develop defensible analytical conclusions, identify information gaps, and recommend appropriate follow-on actions.
________________________________________
Key Responsibilities
• Perform initial triage and assessment of incoming cyber threat tickets, incident reports, and IOC submissions.
• Analyze technical data including IP addresses, domain names, file hashes, network traffic patterns, and malware artifacts.
• Determine threat severity, credibility, and potential impact to critical infrastructure sectors.
• Enrich IOCs using threat intelligence platforms, open-source intelligence (OSINT), and government resources.
• Prepare concise triage reports with actionable recommendations for escalation or further analysis.
• Route tickets to appropriate JCDC teams, CISA divisions, or interagency partners based on assessment findings.
• Coordinate with sector-specific analysts and interagency liaisons to gather additional context.
• Maintain accurate documentation within ticketing systems and knowledge management platforms.
• Participate in shift handoffs and daily operational briefings.
• Support the development and maintenance of triage playbooks and Standard Operating Procedures (SOPs).
• Monitor emerging threat campaigns and trending adversary activity.
• Provide feedback to submitters and partner organizations regarding ticket status and outcomes.
________________________________________
Mandatory Skills
• U.S. Citizenship.
• Active TS/SCI clearance.
• Ability to obtain Department of Homeland Security (DHS) Suitability.
• Three (3) to five (5) years of progressive experience in threat intelligence, Security Operations Center (SOC) operations, cyber incident response, or a related cybersecurity discipline.
• Experience performing initial triage and assessment of cyber threat tickets, incident reports, and IOC submissions.
• Experience analyzing IP addresses, domains, file hashes, network traffic patterns, malware artifacts, and other technical indicators.
• Experience enriching IOCs using threat intelligence platforms, OSINT, or similar resources.
• Ability to assess threat severity, credibility, and potential impact.
• Ability to develop concise analytical conclusions and actionable recommendations.
• Experience maintaining incident documentation using ticketing or knowledge management systems.
• Strong analytical, research, and problem-solving skills.
• Strong written and verbal communication skills.
• Ability to work collaboratively across multiple physical locations.
________________________________________
Preferred Skills
• Prior cybersecurity experience supporting federal organizations such as CISA, FBI, NSA, or DoD.
• Understanding of the CISA National Cyber Incident Scoring System (NCISS) for prioritizing cyber incidents.
• Knowledge of common cyberattack stages, including reconnaissance, scanning, enumeration, gaining access, privilege escalation, persistence, network exploitation, and covering tracks.
• Experience recognizing and categorizing vulnerabilities and associated cyberattacks.
• Knowledge of Computer Network Defense (CND) policies, procedures, and regulations.
• Knowledge of different operational threat environments, including non-nation-state and nation-state-sponsored threats.
• Knowledge of system and application security threats and vulnerabilities, including buffer overflows, cross-site scripting, injection attacks, race conditions, covert channels, replay attacks, return-oriented attacks, and malicious code.
• Experience with SIEM platforms, Threat Intelligence Platforms (TIPs), and ticketing systems.
• Knowledge of critical infrastructure sectors and associated cyber risks.
• Familiarity with DHS/CISA cybersecurity products and services.
________________________________________
Education
Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline from an accredited college or university.
OR
High School Diploma with four (4) or more years of directly relevant technical experience.
________________________________________
Desired Certifications
• CompTIA Security+
• CompTIA CySA+
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• Similar cybersecurity or incident response certifications
________________________________________
Why QSS?
At QSS, you'll directly support mission-critical cybersecurity operations that help protect federal agencies, state and local governments, and critical infrastructure from cyber threats. You'll work alongside cybersecurity professionals and government partners to identify, assess, and respond to emerging cyber incidents.
________________________________________
Benefits Include:
• Competitive compensation with annual performance bonuses
• Premium Medical, Dental & Vision coverage
• Generous PTO plus Federal Holidays
• 401(k) with company match