Senior Threat Detection & Response Engineer, High Level Clearance Required

ICF

Senior Threat Detection & Response Engineer supporting federal cyber security program; focusing on research and development of cyber analytic capabilities.

Posted 7/15/2026full-timeArlington • Florida, Virginia • 🇺🇸 United StatesSenior💰 $119,323 - $202,850 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity, data analysis, and the implementation of advanced security platforms, with a strong focus on translating mission requirements into effective software solutions. Proficient in utilizing open-source technologies and tools to enhance operational efficiency and support cybersecurity missions.

Highest-signal resume keywords

Cybersecurity ExpertiseData Analysis and VisualizationOpen-Source Big Data TechnologiesAdvanced Security Platforms ImplementationActive High-Level Security Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Threat AnalysisPacket Capture AnalysisMalware Detection MethodsQuery Languages (SQL, KQL)Advanced Dashboard Development (Kibana, Splunk)Network Security Analysis/IDS ToolsMathematics Behind Machine Learning AlgorithmsTechnical ReportingIncident ResponseThreat Hunting

Soft Skills

Effective CommunicationProblem-SolvingLeadership Awareness

Tools & Technologies

GreenPlumApache HadoopApache KafkaKibanaSplunk

Certifications & Qualifications

Active High-Level Security Clearance

Industry Keywords

Cybersecurity FrameworksData AggregationData CorrelationData VisualizationTechnical Training

Tech Stack

Tools & technologies

ApacheCyber SecurityGreenplumHadoopKafkaSplunkSQL

About the role

Key responsibilities & impact

Oversee the design of the operational effects as described by the Government
Evaluate alternatives and provide well-informed recommendations on technical options for design and development
Translate mission requirements into a variety of software products, evolutionary prototypes, and advanced countermeasure capabilities
Identify optimal methods for aggregating, storing, correlating, and visually depicting various types of data
Advise on data preparation, implementation of techniques, visualizations, and employment of analytics developed by ICF and customer partners
Assess current use of cyber tools by analysts and assess whether efficiencies can be made via alternate use of current or adoption of alternate tools
Problem-solve by identifying potential tools/processes to support needs by capturing areas of improvement that can be translated into functional requirements for future planning
Identify areas of technical training gaps and proposed approaches to methods (hands on, online modules, etc.) to improve the use of tools and data in support of the cybersecurity mission.
Participate in post-engagement review
Effectively communicate with leadership to ensure awareness of progress and/or challenges

Requirements

What you’ll need

Bachelor’s degree with 12+ or Master’s degree with 10+ years of experience in IT, Cyber, Engineering, or a related field
Working knowledge of open-source distributed massively parallel processing databases such as GreenPlum and open-source big data technologies such as Apache Hadoop, Apache Kafka, etc.
5 or more years of implementing custom and high-impact security platforms in critical program areas.
5 or more years of advanced cyber threats, tools, techniques, and processes (e.g., Threat Hunt, Incident Response, Investigations, Technical Reporting, etc.)
5 years of experience using network security analysis/IDS tools
5 or more years of experience analyzing packet capture and NetFlow data with an understanding of current cyber threats and trends derived from multiple sources (e.g., open-source, intelligence products, etc.)
5 or more years of experience with different types of Malware including detection methods, attack vectors, and vulnerabilities used
Experience with query languages (e.g., SQL, KQL, etc.)
Experience developing advanced dashboards (e.g., Kibana, Splunk, etc.)
Experience with different cybersecurity frameworks and knowledge bases to identify tactics, techniques, and procedures of known actors
Understanding of mathematics behind machine learning algorithms
Active high-level security clearance required as part of client contract requirements.

Benefits

Comp & perks

Reasonable Accommodations
Equal Employment Opportunity
Professional development opportunities