Cybersecurity Incident Response & Threat Detection Analyst (Ohio)

Markesman Group•Whitehall, OH

13h

About The Position

The Cybersecurity Incident Response & Threat Detection Analyst monitors SIEM and other cybersecurity platforms to identify and respond to cyber threats. The role analyzes logged events, network traffic, and security alerts across multiple defensive technologies; investigates Advanced Persistent Threats and low-and-slow adversary activity; and performs incident detection, analysis, containment, and response. The analyst conducts root-cause analysis, supports enterprise cybersecurity tools and applications, applies Defense-in-Depth principles, and uses threat intelligence and OSINT to improve detection and response capabilities. The position also develops scripts and tools, supports defensive signatures and perimeter security controls, and coordinates incident findings and response actions with cybersecurity stakeholders.

Requirements

5+ years of relevant cybersecurity experience.
2+ years performing root-cause analysis of cybersecurity events and incidents.
Working knowledge of at least two security technology areas, such as firewalls, IDS/IPS, endpoint protection, DLP, vulnerability management, forensics, malware analysis, or device hardening.
Understanding of Defense-in-Depth.
Ability to develop scripts and tools supporting detection and incident response.
DoD Top Secret clearance.
Eligible for SCI access.
Eligible for IT-I Critical Sensitive / Tier 5 (T5) at proposal submission.

Nice To Haves

Experience with SPL, Python, and/or PowerShell.

Responsibilities

Monitor SIEM and other cybersecurity platforms to identify and respond to cyber threats.
Analyze logged events and network traffic for indications of attack or compromise.
Investigate Advanced Persistent Threats and low-and-slow adversary activity.
Perform cybersecurity incident detection, analysis, containment, and response.
Conduct root-cause analysis of cybersecurity events and incidents.
Analyze security alerts across multiple defensive security technologies.
Support enterprise cybersecurity tools and applications.
Apply Defense-in-Depth principles to improve enterprise security posture.
Use threat intelligence and OSINT to improve detection and response capabilities.
Develop scripts and tools to improve threat detection and incident response.
Support implementation and sustainment of defensive signatures and perimeter security controls.
Coordinate incident findings and response actions with cybersecurity stakeholders.