Description
EOA Technologies is seeking a Cyber Threat Analyst with subject matter expertise in industrial control systems and critical infrastructure (ICS/SCADA) to join our team. In this role you will be focused on conducting continuous research on emerging threats and threat actor activity to identify and assess the capabilities and activities of cyber criminals and/ or foreign intelligence entities. You will work as part of a team that analyzes data and prioritizes vulnerabilities with the goal to prevent and eradicate threats to critical U.S. systems.
Requirements
To be considered for this position you must have the following:
- Possess an active TS/SCI with Polygraph security clearance
- Must have a Bachelor’s Degree in computer science, international relations, information security, or a related field. Master’s Degree is preferred but not required.
- Minimum of Seven (7+) years’ experience working in the areas of intelligence, information security, network forensics or insider threat with focus on Industrial Control Systems/Supervisory Control and Data Acquisition (ICS/SCADA) systems.
- Subject matter expertise understanding the unique components, protocols, and architectures of ICS/SCADA systems.
- Ability to understand data in various formats to extract and enrich information to enhance its value.
- Experience working with development teams to articulate requirements/enhancements to capabilities and tools.
- Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
- Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards.
- Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark
- Familiarity writing signatures in Zeek and/or Snort
- Document findings and create detailed reports to ensure tradecraft is continually updated. Present results to technical and non-technical stakeholders.
Employment decisions are based solely on qualifications, merit, and business needs - not on any protected characteristic. EOA Technologies, LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, ancestry, marital status, religious affiliation, hairstyle, or any other characteristic protected by federal, state or local laws. EOA is committed to providing reasonable accommodations when feasible to individuals with disabilities.
Skills Required
- Active TS/SCI with Polygraph security clearance
- Bachelor's degree in computer science, international relations, information security, or related field
- Master's degree (preferred)
- Minimum of seven (7+) years' experience in intelligence, information security, network forensics, or insider threat with focus on ICS/SCADA
- Subject matter expertise in components, protocols, and architectures of ICS/SCADA systems
- Ability to understand and enrich data in various formats
- Experience working with development teams to define requirements and enhancements
- Experience with XKS creating queries, fingerprinting, and identifying atypical events
- Experience with Elastic, Splunk, or other SIEMs creating visualizations and dashboards
- Understanding of TCP/IP protocols and packet flows; analysis of PCAP traffic in Wireshark
- Familiarity writing signatures in Zeek and/or Snort
- Document findings and create detailed reports; present results to technical and non-technical stakeholders
What We Do
EOA Technologies, LLC is a technology consulting firm providing mission-critical IT solutions to federal agencies and commercial enterprises. The company specializes in enterprise IT architecture, data center buildout and optimization, and secure facilities management, including SCIF design. Utilizing a cleared workforce, they deliver innovative technical solutions, cybersecurity services, technical staffing, and IT training to transform organizations across corporate and classified environments.









