Cyber Triage Analyst Level III

JCDC Cyber Triage Analyst – TS/SCI

Argo Cyber Systems, LLC

Engagement Support Services (ESS) – JCDC Cyber Operations

Active TS/SCI

U.S. Citizenship Required

Must be able to obtain and maintain DHS Suitability

Full-Time

Mid-Level | 5-7+ Years Cybersecurity Experience

Argo Cyber Systems, LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) providing advanced cybersecurity services to U.S. Government and commercial customers. Our cybersecurity capabilities include Security Operations Center operations, cyber incident response, threat hunting, cyber threat intelligence, vulnerability management, cloud security, Zero Trust, digital forensics and incident response, penetration testing, and cybersecurity risk and compliance services. Argo Cyber Systems provides opportunities for experienced cybersecurity professionals to work directly on mission-focused programs protecting federal agencies and critical infrastructure from sophisticated cyber threats.

Argo Cyber Systems is supporting a U.S. Government customer in the rapid deployment and management of secure, cloud-based capabilities supporting cyber incident response, threat hunting, and national-level cybersecurity operations. Under the Engagement Support Services (ESS) program, our team helps ensure cybersecurity analysts have rapid access to the secure tools, infrastructure, and operational environments required to investigate cyber threats affecting federal agencies, state and local governments, and U.S. critical infrastructure.

Working on this program means directly supporting the nation’s cybersecurity defenders. Our mission is to provide reliable, scalable, and secure capabilities when they are needed most-during active cyber incidents and emerging threat campaigns affecting America’s digital infrastructure.

Argo Cyber Systems is seeking an experienced JCDC Cyber Triage Analyst to serve as a frontline cyber defender supporting the Joint Cyber Defense Collaborative (JCDC).

The Cyber Triage Analyst performs initial analysis and triage of cyber threat reports, indicators of compromise (IOCs), incident notifications, and other cybersecurity information submitted to the JCDC. This is not an entry-level or developmental analyst position. The successful candidate will operate in a role comparable to a Tier 1/Tier 2 SOC Analyst with enhanced Cyber Threat Intelligence (CTI) responsibilities
. Analysts are expected to independently research cyber activity, rapidly evaluate technical information, develop defensible analytical conclusions, identify intelligence and information gaps, and recommend appropriate follow-on actions. This position requires strong technical analysis skills combined with the ability to communicate and coordinate effectively with government organizations, private-sector partners, critical infrastructure stakeholders, and other cybersecurity professionals.

• Perform initial triage and assessment of incoming cyber threat tickets, incident reports, IOC submissions, and cybersecurity notifications.
• Analyze technical indicators and artifacts including IP addresses, domain names, URLs, file hashes, network traffic patterns, malware artifacts, and related telemetry.
• Assess the credibility, severity, scope, and potential operational impact of reported cyber activity.
• Evaluate potential impacts to federal networks and U.S. critical infrastructure sectors.
• Enrich IOCs using Threat Intelligence Platforms (TIPs), OSINT resources, commercial intelligence sources, and authorized government-exclusive resources.
• Correlate indicators with known threat actors, campaigns, malware families, vulnerabilities, tactics, techniques, and procedures (TTPs).
• Develop concise, defensible cyber triage reports containing analytical findings and actionable recommendations.
• Determine when incidents or threat activity require escalation or additional technical analysis.
• Route tickets and analytical findings to appropriate JCDC teams, CISA organizations, or interagency partners.
• Coordinate with sector-specific analysts, incident responders, threat hunters, intelligence analysts, and interagency liaisons to obtain additional technical and operational context.
• Maintain complete and accurate documentation within ticketing, case management, and knowledge management systems.
• Participate in operational shift handoffs and daily…