Cyber Defense Response Analyst II
About The Position
The Cyber Defense Response Analyst II is a mid-level technical role focused on responding to and remediating cyber incidents at CME Group, a major player in global financial markets. We are looking for someone who finds joy in the inner workings of technology, with the occasional tendency to get lost in deep research. In this role, you will use industry leading tools while responding to medium-severity incidents in collaboration with teammates around the globe. We provide autonomy, and great learning environment with access to top tier technology, opportunities to align project work with your individual interests, and access to our extensive training programs, including annual SANS training. Importantly, this is a second shift role (12p-8p US Central Time) that's anticipated to be convertible into a first shift role (8a-4p/9a-5p) within approximately 6 months of hire date.
Requirements
- 2+ years of practical experience with Digital Forensics, Incident Handling, and/or Malware Analysis.
- 2+ years of experience with Q Radar, Sentinel, Splunk, Chronicle, ArcSight, or similar log management technologies.
- 2+ years of experience using tools such as KAPE, EnCase, Cellebrite, FTK, Magnet Axiom, and Autopsy, plus comfort with malware analysis tools like Ghidra, Ida Pro, PEStudio, and x64dbg.
- Strong understanding of computer networking, operating systems, and their intersection with Cybersecurity.
- Development experience with Python, specifically for data manipulation (Pandas) and interacting with REST APIs.
- Practical experience with AWS, GCP, or Azure.
- BA/BS in Engineering, Computer Science, or Information Security (non-tech degrees acceptable with appropriate levels of Information Security job experience and/or certifications)
- GCIH, GCFE, GCFA, OSCP, Sec+, and similar cyber-oriented certifications are desired
Nice To Haves
- Innate Curiosity: An exceptional level of curiosity and a track record of self-teaching advanced technical concepts.
- Highly Innovative: You have a consistent record of taking unorthodox approaches to challenges and a demonstrated ability to innovate within information technology domains.
- A "Researcher" Mindset: A passion for collecting facts, debating details, and diving into "rabbit holes" to solve complex problems.
- Adept at High-Pressure Communication: Ability to deal effectively at all levels of the organization and translate technical research into clear, actionable intelligence for leadership.
- Highly Detail Oriented: Very strong attention to detail; you notice things others often don’t.
- Impactfully Collaborative: You excel at technical collaboration and helping teams deliver high-impact.
Responsibilities
- Drive the full incident response lifecycle from initial triage to remediation, confidently applying specialty skills like endpoint forensics and malware analysis. Be ready to operate in a multi-cloud environment.
- Conduct regular threat hunts to identify misconfigurations, detection gaps, and other anomalies.
- Use AI, Python and REST APIs to build/integrate security tools for incident response needs, while working with automation engineers to develop heavy-duty solutions for advanced use-cases.
- Lead regular tabletop exercises to improve team readiness.
- Contribute continuously to our internal knowledge base of incident response runbooks and playbooks, keeping it exhaustive, accurate, and reflective of the latest workflows.
Benefits
- Annual target bonus opportunity
- Opportunity to become an owner in the company through our broad-based equity program
- Comprehensive health coverage
- Retirement package that includes both a 401(k) and an active pension plan
- Highly competitive education reimbursement provisions
- Paid time off
- Mental health benefit
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
