Cybersecurity Incident Response & Threat Detection Analyst w/TS

TekSynap•Columbus, OH

10h•$100,000 - $160,000•Onsite

About The Position

We are seeking a Cybersecurity Incident Response & Threat Detection Analyst. This role participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment. The analyst performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity, employing Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats. The role involves reviewing logged events for trends indicative of attack or compromise, actively monitoring logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks, and maintaining awareness of possible threats using intelligence resources like Open Source Intelligence (OSINT). Additionally, the analyst provides technical analysis and sustainment support for enterprise Cybersecurity tools and applications, assisting with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats.

Requirements

Five (5) years relevant experience
Two (2) years performing root cause analysis of cybersecurity events and incidents.
Working knowledge of at least two type of security tools: Firewall; IDS/IPS; Host based antivirus; Data loss prevention; Vulnerability Management; Forensics; Malware Analysis; Device Hardening.
Ability to build scrips and tools to enhance threat detection and incident response capabilities.
Top Secret, IT-I with SCI eligibility
U.S. Citizen

Responsibilities

Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment.
Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity.
Employs Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats.
Reviews logged events for trends that are indicative of attack or compromise within the environment.
Actively monitors logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks within the environment.
Maintains awareness of possible threats with the use of intelligence resources which include Open Source Intelligence (OSINT).
Provides technical analysis and sustainment support for the enterprise for Cybersecurity tools and applications and assists with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats.