Cyber Defense Response Analyst II

Forensic Focus; New York (NY); Híbrido; USD 100.000 - 140.000; Jornada completa

Descripción de la vacante

CME Group in New York, NY is seeking a Cyber Defense Response Analyst II to manage the full incident response lifecycle, from triage through remediation, applying endpoint forensics and malware analysis across multi-cloud environments.

You will perform proactive threat hunting, build automation tooling, lead tabletop exercises, and maintain incident response runbooks and playbooks. 2+ years in forensics or incident handling, plus SIEM experience, and familiarity with industry tools will help.

Formación

• 2+ years in digital forensics, incident handling or malware analysis.
• Experience with SIEM platforms (QRadar, Sentinel, Splunk).
• Familiarity with forensic tools such as KAPE, EnCase, Cellebrite, FTK, Magnet Axiom, Autopsy; malware tools like Ghidra and IDA Pro.

Responsabilidades

• Manage the full incident response lifecycle from triage to remediation.
• Apply endpoint forensics and malware analysis across multi-cloud environments.
• Lead threat hunting, build automation tooling, and conduct tabletop exercises.

Conocimientos

Digital forensics

Incident handling

Malware analysis

SIEM experience

Python

Cloud platforms

GCIH

GCFE

GCFA

OSCP

Herramientas

QRadar

Sentinel

Splunk

KAPE

EnCase

Cellebrite

FTK

Magnet Axiom

Autopsy

Ghidra

IDA Pro

Descripción del empleo

# Cyber Defense Response Analyst II*CME Group***New York, NY**Hybrid · Mid · Full-time### The RoleThis position manages the full incident response lifecycle, from triage through remediation, applying endpoint forensics and malware analysis across multi-cloud environments. Duties include proactive threat hunting, building automation tooling, leading tabletop exercises, and maintaining incident response runbooks and playbooks.### Skills & ExperienceRequires 2+ years in digital forensics, incident handling or malware analysis, plus SIEM experience (QRadar, Sentinel, Splunk). Familiarity with forensic tools like KAPE, EnCase, Cellebrite, FTK, Magnet Axiom, Autopsy, and malware tools such as Ghidra and IDA Pro is expected. Python, cloud platforms, and certifications like GCIH, GCFE, GCFA or OSCP are desired.### Who It SuitsIdeal for a curious, detail-oriented analyst with a researcher’s mindset who enjoys deep technical investigation, collaborative incident response work, and continuous learning within a structured financial markets organization.