Cyber Defense Response Analyst II
About The Position
The Cyber Defense Response Analyst II is a mid-level technical role at CME Group focused on responding to and remediating cyber incidents. The analyst responds to medium-severity incidents in collaboration with teammates around the globe and works in a multi-cloud environment, using industry-leading tools. The role offers autonomy, access to advanced technology and training programs—including annual SANS training—and opportunities to align project work with individual interests. This is a second-shift role, scheduled for 12 p.m.–8 p.m. US Central Time. The schedule is anticipated to be convertible to a first-shift schedule (8 a.m.–4 p.m. or 9 a.m.–5 p.m.) approximately six months after the hire date.
Requirements
- Demonstrate exceptional curiosity and a track record of self-teaching advanced technical concepts.
- Show innovation and the ability to take unconventional approaches to information technology challenges.
- Bring a researcher mindset, including an interest in investigating details and solving complex problems.
- Communicate effectively at all organizational levels and translate technical research into clear, actionable intelligence for leadership.
- Have strong attention to detail.
- Collaborate effectively with technical teams and help deliver high-impact work.
- Have a strong understanding of computer networking, operating systems, and their intersection with cybersecurity.
- Have development experience with Python for data manipulation, including Pandas, and interaction with REST APIs.
- Hold a BA/BS in Engineering, Computer Science, or Information Security; non-technical degrees are acceptable with appropriate information security experience and/or certifications.
Nice To Haves
- At least 2 years of practical experience in digital forensics, incident handling, and/or malware analysis.
- At least 2 years of experience with QRadar, Sentinel, Splunk, Chronicle, ArcSight, or similar log management technologies.
- At least 2 years of experience with forensics tools such as KAPE, EnCase, Cellebrite, FTK, Magnet Axiom, and Autopsy, and familiarity with malware analysis tools such as Ghidra, IDA Pro, PEStudio, and x64dbg.
- Practical experience with AWS, GCP, or Azure.
- Cybersecurity certifications such as GCIH, GCFE, GCFA, OSCP, or Security+.
Responsibilities
- Drive the incident response lifecycle from initial triage through remediation, applying skills such as endpoint forensics and malware analysis.
- Conduct regular threat hunts to identify misconfigurations, detection gaps, and other anomalies.
- Use AI, Python, and REST APIs to build or integrate security tools for incident response needs, and collaborate with automation engineers on solutions for advanced use cases.
- Lead regular tabletop exercises to improve team readiness.
- Continuously contribute to and maintain the internal knowledge base of incident response runbooks and playbooks, keeping it accurate and current.
Benefits
- Annual target bonus opportunity.
- Opportunity to become an owner through a broad-based equity program.
- Comprehensive health coverage.
- 401(k) and an active pension plan.
- Education reimbursement.
- Paid time off.
- Mental health benefit.
- Annual SANS training.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
