Cybersecurity Incident Response & Threat Detection Analyst

OCH Technologies•Columbus, MI

1d•Onsite

About The Position

OCH Technologies is seeking a Cybersecurity Incident Response & Threat Detection Analyst to support a Defense Logistics Agency program. The position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements. The role is on-site in Columbus, Ohio; Battle Creek, Michigan; or Fort Belvoir, Virginia. The analyst supports 24x7x365 cybersecurity monitoring and response across the enterprise network environment, using SIEM platforms and other cybersecurity tools to detect, investigate, and respond to threats. The role includes analyzing security events and network activity, identifying attack indicators and emerging threats, conducting technical analysis and troubleshooting, and supporting the sustainment of cybersecurity tools. The analyst also contributes to Defense-in-Depth strategies and detection and perimeter defense capabilities. Candidates must have a technical bachelor's degree, relevant cybersecurity experience, and the required active security designation or investigation and DoD Top Secret clearance. The role requires eligibility for IT-I designation and access to SCI.

Requirements

Bachelor’s degree (BS or BA) in a technical discipline from an accredited university.
Five years of relevant cybersecurity experience supporting security operations, threat detection, incident response, or related cybersecurity functions.
Two years of experience conducting root cause analysis of cybersecurity events and incidents, including identifying contributing factors, attack vectors, and remediation opportunities.
Demonstrated experience using at least two types of cybersecurity tools or technologies, such as firewalls, IDS/IPS, host-based antivirus or endpoint protection, DLP, vulnerability management, digital forensics, malware analysis, or device hardening solutions.
Working knowledge of Defense-in-Depth principles and their application to cybersecurity architecture, threat prevention, detection, and response.
Experience developing scripts, tools, or automation to enhance threat detection and incident response capabilities.
Must possess an active IT-I (Critical-Sensitive) security designation or Tier 5 (T5) investigation at the time of proposal submission.
Must possess an active DoD Top Secret security clearance, be eligible for IT-I designation, and be eligible for access to Sensitive Compartmented Information (SCI).

Nice To Haves

Experience developing scripts, tools, or automation using SPL, Python, and/or PowerShell.

Responsibilities

Participate in 24x7x365 monitoring of SIEM platforms and other cybersecurity monitoring tools to detect, investigate, and respond to cybersecurity threats within the enterprise network environment.
Protect, monitor, detect, analyze, and respond to unauthorized or potentially malicious activity across the enterprise environment.
Use cybersecurity capabilities and deliberate response actions to address security alerts, incidents, and emerging threats.
Review and analyze logged security events to identify trends, patterns, and indicators of potential attack, compromise, or malicious activity.
Monitor network logs and traffic to identify indicators of Advanced Persistent Threats (APTs), low-and-slow attacks, and other sophisticated attack techniques.
Maintain awareness of current and emerging cyber threats through intelligence resources, including Open Source Intelligence (OSINT).
Perform technical analysis, troubleshooting, and sustainment support for enterprise cybersecurity tools, technologies, and applications.
Support implementation and maintenance of Defense-in-Depth strategies, including cybersecurity signatures, detection capabilities, and perimeter defense controls designed to mitigate and reduce network threats.