fairfax Work Opportunities ∙ Page 1

ECS is seeking a Cyber Threat Analyst 1 to work in our Fairfax, VA office.  

As a leading managed cybersecurity services provider, ECS delivers a highly tailored and customized offering to each customer. Our team is responsible for protecting the ECS corporate and customer networks. Our mission is broad, and our team is agile. We will leverage your unique skills to help solve customers’ challenges, such as engineering a system to address a technical hurdle, protecting customer data, or consulting on a wide range security topics. You are empowered to engage and lead across multiple groups and must have the self-sufficiency and focus to work well without constant oversight.

Our Cyber Threat Analysts are responsible for investigating threats targeting ECS’ internal network and commercial customers. They support the commercial cybersecurity program during core and non-core business hours. This position requires you to work rotating shifts in a dynamic, fast-paced 24x7x365 operations environment. As a Cyber Threat Analyst, you will have mentors to help guide you through your ECS journey.

Responsibilities:

• Conduct network monitoring and intrusion detection analysis using defense tools, including IDS/IPS, firewalls, and host-based security systems.
• Analyze security events in a SIEM environment to correlate and identify indicators of potential threat activity.
• Research emerging cyber threats and vulnerabilities to aid in the identification and response to incidents.
• Perform log-based and endpoint-based threat detection to identify and defend against potential security threats across multiple sources.
• Correlate network, cloud, and endpoint activities to identify unauthorized access or attacks.
• Review alerts from security sensors, documenting technical details and incident reports for further investigation.
• Assess and resolve phishing email submissions from clients, identifying malicious content and recommending mitigation actions.
• Collaborate with threat intelligence and threat-hunting teams, maintaining awareness of updated threat intelligence sources and methodologies.
• Support investigations for both minor and significant cybersecurity incidents, assisting in containment and analysis efforts.
• Communicate security incidents and findings to both internal teams and external customers, as needed.