Cybersecurity Incident Response & Threat Detection Analyst

AGE Solutions • Columbus, OH

18h • $110,000 • Onsite

About The Position

AGE Solutions is seeking an experienced Cybersecurity Incident Response & Threat Detection Analyst to support continuous monitoring, detection, analysis, and response to cybersecurity threats within the Enterprise Network Environment. This position participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools, investigates events and activity indicative of attack or compromise, and actively monitors for Advanced Persistent Threats (APTs) and “low and slow” attacks. The analyst leverages intelligence resources, including Open Source Intelligence (OSINT), provides technical analysis and sustainment support for cybersecurity tools and applications, and assists with Defense-in-Depth signatures and perimeter defense controls.

Requirements

• Five (5) years of relevant experience.
• Two (2) years of experience performing root cause analysis of cybersecurity events and incidents.
• Must possess a current DoD Top Secret Clearance with IT-I, T5 investigation with eligibility for Sensitive Compartmented Information (SCI) access.
• Must have at least ONE IAT-II Certification from one of the following: Cisco Certified Network Associate Security (CCNA Security), CompTIA Cybersecurity Analyst (CySA+), Global Industrial Cyber Security Professional (GICSP), GIAC Security Essentials (GSEC), CompTIA Security+ Continuing Education (Security+ CE), Systems Security Certified Practitioner (SSCP).
• Must have at least one of the following CSSP Incident Responder certifications: Certified Ethical Hacker (CEH), CyberSec First Responder (CFR), CompTIA Cybersecurity Analyst (CySA+), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), Cisco Cybersecurity Specialist (SCYBER).
• Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host-Based Antivirus, Data Loss Prevention, Vulnerability Management, Forensics, Malware Analysis, or Device Hardening.
• Understanding of Defense-in-Depth.
• Ability to build scripts and tools to enhance threat detection and incident response capabilities, preferably using SPL, Python, or PowerShell.

Responsibilities

• Participate in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment.
• Perform actions to protect, monitor, detect, analyze, and respond to unauthorized activity.
• Employ cybersecurity capabilities and deliberate actions to respond to specific alerts and emerging threats.
• Review logged events and identify trends indicative of attack or compromise within the environment.
• Actively monitor logs and network traffic for Advanced Persistent Threats (APTs) and “low and slow” attacks.
• Maintain awareness of potential threats through intelligence resources, including Open Source Intelligence (OSINT).
• Perform root cause analysis of cybersecurity events and incidents.
• Provide technical analysis and sustainment support for enterprise cybersecurity tools and applications.
• Assist with the application of Defense-in-Depth signatures and perimeter defense controls to diminish network threats.
• Utilize security tools in support of cybersecurity monitoring, detection, analysis, and incident response activities.
• Develop scripts and tools to enhance threat detection and incident response capabilities using SPL, Python, or PowerShell.
• Independently evaluate incident severity, business impact, and alternative containment and remediation approaches; recommend response priorities to customer cybersecurity leadership.
• Use root cause findings to recommend changes to customer incident-response practices and security controls, evaluating security benefits and operational tradeoffs.

Benefits

• 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays.
• Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results.
• 401(k) with Match: We match 3% of your contributions with immediate vesting.
• Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.
• Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
• Parental Leave: 15 days of fully paid leave for new parents.
• Military Differential Pay: We bridge the gap for employees on active duty.
• Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
• Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed