This role serves as the senior technical lead for mobile threat detection and response. The analyst is responsible for conducting advanced mobile forensics, identifying sophisticated mobile malware, performing OS-level investigations, and developing proactive mitigation strategies. The role includes integration of Mobile Device Management (MDM) data, anomaly detection using behavioral analytics, and full lifecycle mobile incident response. This position aligns with cyber defense requirements for protecting classified systems and is central to supporting continuity of operations, red team simulations, and regulatory compliance. Serves as the senior mobile cybersecurity SME, executing high-level detection, reverse engineering, and policy enforcement.

This position performs all duties and responsibilities in accordance with the Mission, Vision, and Core Values of Cayuse.

• Lead the analysis and identification of mobile threats, including malware, vulnerabilities, and malicious activities targeting mobile devices and applications.
• Develop threat intelligence reports based on findings from mobile threat monitoring, investigation, and collaboration with cyber intelligence teams.
• Possess a proficient understanding of mobile operating systems architecture, including the security features and limitations of each platform.
• Demonstrate expertise in mobile application security, network protocols, and potential exploitation vectors associated with mobile devices.
• Understand the tactics, techniques, and procedures (TTPs) related to mobile threats, including the latest trends in mobile malware and exploits.
• Develop mitigation strategies for identified mobile threats, collaborating with development, security operations, and network teams.
• Analyze threat intelligence feeds to understand emerging mobile security risks.
• Collaborate with the SOC to integrate mobile security data with the organization's Mobile Device Management (MDM) system.
• Ensure that mobile devices are correctly configured and comply with security policies.
• Implement tools and processes to detect anomalies and suspicious activities on mobile devices.
• Work closely with the SOC to promptly investigate and respond to mobile security incidents.
• Conduct regular vulnerability assessments on mobile devices and applications.
• Proactively search for signs of compromise on mobile devices by employing threat-hunting techniques.
• Use advanced analytics and machine learning to identify patterns indicative of mobile threats.
• Adapt to new and emerging mobile threats, ensuring proactive defense measures are continuously updated.
• Conduct in-depth malware analysis and reverse engineering on mobile devices to assess the scope and impact of malicious activity.
• Share findings with the SOC to enhance threat intelligence and improve detection capabilities.
• Ensure that mobile devices adhere to security policies and compliance standards.
• Provide security awareness training to mobile device users to reduce the likelihood of social engineering attacks.
• Promote secure mobile practices among employees.
• Report mobile security incidents to the SOC and other relevant stakeholders.
• Maintain thorough documentation of incidents, investigations, and response activities.
• Participate in post-incident reviews and continuously improve MTD processes and tools based on lessons learned.

• Other duties as assigned.

• Expert knowledge of mobile threat attack vectors, advanced malware analysis, and sophisticated social engineering tactics.
• Comprehensive understanding of mobile forensics methodologies and tools.
• Proficiency in developing and maintaining a mobile threat intelligence program with measurable KPIs.
• Familiarity with security frameworks specific to mobile device environments, such as the Mobile Security Framework (MobSF).
• Knowledge of the implications of the Internet of Things (IoT) for mobile security.
• Advanced incident response skills, with the ability to lead during high-stakes security incidents.
• Active Top-Secret Clearance with SCI Eligibility.

• Must be able to pass a background check. May require additional background checks as required by projects and/or clients at any time during employment.
• Experience working with the following software:

o   MobSF

o   Splunk ES

o   Axiom

o   Magnet AXIOM Cyber

o   MDM suites

o   CrowdStrike

o   Volatility

Preferred Certifications:

• GIAC Continuous Monitoring Certification (GMON).
• GIAC Certified Incident Handler (GCIH).
• GIAC Certified Forensic Analyst (GCFA).
• GIAC Certified Intrusion Analyst (GCIA).
• GIAC Network Forensic Analyst (GNFA).
• GIAC Cloud Threat Detection (GCTD).
• GIAC Cloud Forensics Responder (GCFR).
• GIAC Advanced Smartphone Forensics Certification (GASF).
• GIAC Mobile Device Security Analyst (GMOB).

Other Duties: Please note this job description is not designed to cover or contain a comprehensive list of activities, duties or responsibilities that are required of the employee for this job.  Duties, responsibilities, and activities may change at any time with or without notice.

Cayuse is an Equal Opportunity Employer.  All employment decisions are based on merit, qualifications, skills, and abilities. All qualified applicants will receive consideration for employment in accordance with any applicable federal, state, or local law.