Cybersecurity Incident Response and Threat Detection Analyst

We are looking for a Cybersecurity Incident Response and Threat Detection Analyst provide SIEM support for a DoD Agency. In this role, you will be providing cybersecurity monitoring support to detect and respond to cybersecurity threats within the Enterprise Network Environment.

Duties and Responsibilities Include:

• Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment.
• Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity.
• Employs Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats. Reviews logged events for trends that are indicative of attack or compromise within the environment.
• Actively monitors logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks within the environment.
• Maintains awareness of possible threats with the use of intelligence resources which include Open Source Intelligence (OSINT).
• Provides technical analysis and sustainment support for the enterprise for Cybersecurity tools and applications and assists with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats.

Required Skills, Qualifications and Experience:

• Citizenship and Clearance:
  
  
  
  • Must be a US Citizen.
  • Must have and maintain a DoD Top Secret clearance.
  
  
  
  
• Experience:
  
  
  
  • Five (5) years relevant experience
  • Two (2) years performing root cause analysis of cybersecurity events and incidents.
  
  
  
  
• Skills:
  
  
  
  • Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus, Data loss prevention, Vulnerability Management, Forensics, Malware Analysis, Device Hardening, Understanding of Defense-in-Depth
  • Ability to build scripts and tools to enhance threat detection and incident response capabilities (Preferably in SPL, Python, PowerShell)
  
  
  
  
• Certifications:
  
  
  
  • Must have 8570 Baseline Certification for IAT-II
  • CNDSP/CSSP-IR
  
  
  
  
• Location:
  
  
  
  • This is an onsite position in Columbus, OH.
  
  
  
  

Preferred Qualifications:

• Computer Network Defense CE Certification (one of the following): EnCE; ID Analysis, GCFW; GPPA; GCWN; GREM, HBSS Admin 201, HBSS ADV 301, HBSS ADV Analyst 501, FoIH; Adv.IH, MCITP EDST, MCITP EDA, MCITP SA, MCITP EA, MCM, MCA: MS Windows Server: Directory, MCSA:WS2008, MCSA:WS2012, CSE:WS2012, MCSM:DP, GCFE, Windows 10

Work Environment and Physical Demand:

• Must be able to sit for long periods of time.
• Must be able to lift 25 pounds.

Compensation: $120,000 - $130,000