Cyber Security Analyst, Senior (High Level Clearance Required)

September 1, 2026

DescriptionICF seeks an experienced Senior Cyber Security Analyst to support the research and development of new cyber analytic capabilities that will help the US protect and defend its networks and critical information systems. The successful cleared candidate will act as a Senior Cyber Security Analyst to support a large federal cyber security analytic program. Your work will contribute to the knowledge of how cyber-attacks work, how vulnerabilities are exploited, and the way hostile cyber actors operate. Utilize your skills to help experiment and prototype future cyber capabilities for implementation at large-scale.As the Senior Cyber Security Analyst, you will work with our customers, developers, and researchers to evolve, automate, and enhance cybersecurity capabilities in defense or federal agencies. This is an opportunity to contribute to an important project from its beginning, work with the latest and emerging technologies, and all while building a great career at ICF!This role has a hybrid work schedule with the expectation of a minimum of two days/week supporting the program based in Arlington, VA and the remainder of the week teleworking.What You Will Be Doing:<ul><li>Augment operational cyber analysts and act as a consultant for detection and/or threat hunting</li><li>Advise on data preparation, implementation of techniques, visualizations, and employment of analytics developed by ICF and customer partners</li><li>Assess current use of cyber tools by analysts and assess whether efficiencies can be made via alternate use of current, or adoption of alternate tools</li><li>Problem-solve by identifying potential tools/processes to support needs, capturing areas of improvement that can be translated into functional requirements for future planning</li><li>Provide ad-hoc training to cyber analyst teams on tools that support or enhance current processes</li><li>Identify areas of technical training gaps and proposed approaches to methods (hands on, online modules, etc.) to improve the use of tools and data in support of the cybersecurity mission.</li><li>Participate in post-engagement review</li><li>Effectively communicate with leadership to ensure awareness of progress, challenges</li></ul>What You Must Have:<ul><li>Bachelor’s degree with 12+ years, OR Master’s degree with 10+ years of experience in IT, Cyber, or related field, OR equivalent in work experience and specialized training.</li><li>Position requires a minimum of 5 years of Cyber Security experience (e.g., Threat Hunt, Incident Response, Investigations, Technical Reporting, etc.)</li><li>5 years of experience using network security analysis/IDS tools</li><li>5 or more years of experience analyzing packet capture and NetFlow data with an understanding of current cyber threats and trend derived from multiple sources (e.g., open-source, intelligence products, etc.)</li><li>5 or more years of experience with different types of Malware including detection methods, attack vectors, and vulnerabilities used</li><li>Experience with query languages (e.g., SQL, KQL, etc.)</li><li>Experience developing advanced dashboards (e.g., Kibana, Splunk, etc.)</li><li>Experience with different cybersecurity frameworks and knowledge bases to identify tactics, techniques, and procedures of known actors</li><li>5 or more years of Leadership experience</li><li>Active high-level security clearance required as part of client contract requirement</li><li>Due to the nature of the work and contract requirements, US citizenship is required</li></ul>Preferred Qualifications:<ul><li>Interpersonal skills and the ability to communicate effectively with various clients in order to explain and elaborate on technical details</li><li>Practical experience with different scripting languages (e.g., Python, JavaScript, etc.)</li><li>Practical experience with the Databricks Intelligence Platform</li><li>Experience with system vulnerability assessments</li><li>Knowledge of Linux/Unix and Windows operating systems security</li><li>Knowledge of computer programming and scripting languages</li><li>Excellent written and verbal communication skills</li><li>Scaled Agile Framework (SAFe) experience</li><li>CompTIA Security+ or higher certification level preferred</li></ul> Bot and Third-Party ApplicationsPlease note that this application must be submitted directly by the applicant for consideration. Failure to do so may result in the application being excluded for consideration. Applicants needing an accommodation for disability or religious purposes in connection with the application process should contact <a target="_blank" href="mailto:Candidateaccommodation@icf.com">Candidateaccommodation@icf.com</a> for assistance.Working at ICFICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.<div>We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our <a href="https://www.icf.com/legal/equal-employment-opportunity" target="_blank">EEO</a> policy.We will consider for employment qualified applicants with arrest and conviction records. Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email <a href="mailto:Candidateaccommodation@icf.com" target="_blank">Candidateaccommodation@icf.com</a> and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.  </div><div></div><div>Read more about <a href="https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf" target="_blank">workplace discrimination rights</a> or our benefit offerings which are included in the <a href="https://www.icf.com/legal/equal-employment-opportunity" target="_blank">Transparency in (Benefits) Coverage Act.</a> </div> <div>Candidate AI Usage Policy</div><div><div>At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.  </div><div>However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at <a target="_blank" href="mailto:candidateaccommodation@icf.com">candidateaccommodation@icf.com</a>. We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.  </div></div> Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position. The pay range for this position based on full-time employment is:$108,476.00 - $184,409.00Virginia Client Office (VA88)

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...