Cyber Threat Analyst (Detection & Automation Engineering)

Cyber Threat Analyst (Detection & Automation Engineering)
to support cyber threat analysis and detection engineering and operations at a large Federal agency. The role requires close collaboration with security operations, threat intelligence, and incident response stakeholders, along with strong configuration development, testing, and documentation practices. The ideal candidate will have deep experience with cybersecurity threats and analysis workflows, detection capabilities and methodologies, and automation platforms and tools.
This position offers REMOTE work flexibility. Citizens and located in the United States, able to achieve Public Trust security vetting approval.
Design, implement, and maintain automated, Artificial/Super Intelligence (AI/SI) enabled security detection, integration capabilities across enterprise security monitoring technologies.
Strengthen threat detection and response through detection engineering, security automation, systems integration, data analysis, super intelligent and continuous improvement of detection content and workflows.
Build automation and integration workflows to improve detection and response.
Security Platform Integration : Integrate and optimize security technologies (e.g., SIEM, EDR, SOAR, threat intelligence) into a cohesive detection architecture.
Requirements-to-Implementation : Perform requirements analysis and translate operational security needs into technical specifications and implementable solutions.
Testing & Validation : Execute testing, evaluation, and validation of detections and automation/SI workflows; Security Data Analysis : Analyze telemetry to identify anomalies, trends, and detection gaps; Create and maintain technical documentation, SOPs, and runbooks to support reliable operations. Work closely with SOC, threat intelligence, and incident response teams to align detections to threat priorities and operational processes.
Emerging Capability Evaluation : Research and assess new security and SI/ML capabilities to enhance detection effectiveness.
SOAR Platforms and Capabilities (SentinelOne Singularity Hyperautomation, Splunk Enterprise Security, Splunk SOAR)
Artificial Intelligence (AI) / Super Intelligence (SI) Security
SOC operations and processes
Threat intelligence lifecycle and analysis
Network protocols and architecture
Operating systems (Windows/Linux/Unix)
Cloud platforms (AWS/Azure/GCP)
Programming/scripting (Python, PowerShell, Bash)
Detection engineering methodologies
Security automation and orchestration concepts
CISA NICE Framework, ISO 27001/27002, FISMA, FedRAMP, OMB Circulars and Federal Cybersecurity Directives, Privacy Act
Malware analysis
Digital forensics analysis and procedures
Risk assessment methodologies
Bachelors degree + 3 to 13 years of experience in cybersecurity analysis and engineering (cyber threat analysis, intrusion analysis, detection engineering, etc.). Programming/scripting certification or demonstrated proficiency (e.g., Python, PowerShell, similar)
CompTIA Security+ (or equivalent baseline cybersecurity certification)
CompTIA CySA+ Cybersecurity Analyst
GIAC Continuous Monitoring (GMON)
GIAC AI Security Automation Engineer (GASAE)
GIAC Machine Learning Engineer (GMLE)
Certified Information Systems Security Professional (CISSP)
Security Clearance/Vetting:
Remote
TRAVEL:
TELEWORK ELIGIBILITY:
phia LLC ("phia") is a Northern Virginia based, small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis & Incident Response, Cyber Architecture & Capability Analysis, Cyber Policy & Strategy, Information Assurance/Security, Compliance, Certification & Accreditation, Communications Security, Traditional Security, and Facilities Security. phia also provides cyber operations support functions such as: Program and Process Management, Engineering, Development, and Systems Administration that allows for Cyber Operations to efficiently integrate our customer’s missions and objectives. phia supports various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities.
Medical Insurance
Dental Insurance
Life Insurance
Short Term & Long Term Disability
401k Retirement Savings Plan with Company Match
Paid Holidays
phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity, or any other reason prohibited by law in the provision of employment opportunities and benefits.