Cyber Operations Analyst - CSOC Incident Response

MAXAR TECHNOLOGIES, INC.; Westminster (CO); On-site; USD 105,000 - 154,000; Full time

Benefits offered by this job

401(k) match

Wellness resources

Student loan repayment assistance

Adoption reimbursement

Pet insurance

Job summary

Vantor is seeking an experienced Cyber Operations Analyst to support the CSOC, perform incident response, and analyze security alerts. The role requires ability to obtain a TS/SCI clearance and work on-site in Westminster, CO.

You will investigate alerts, coordinate with IT teams, and participate in vulnerability management and incident response activities. The ideal candidate has strong knowledge of SIEM, log management, Python/Bash scripting, and cloud security (AWS), with a background in

Qualifications

• Bachelor’s degree in information security or related field.
• Experience with AWS and cloud security technologies.
• Experience with digital forensic investigations (endpoint, host, network, cloud).
• Python and/or Bash coding experience.
• Knowledge of network security and monitoring tools.

Responsibilities

• Monitor security tools and provide remediation responses.
• Escalate security events as needed.
• Coordinate information gathering for IT teams.
• Triage and analyze real-time data feeds and alerts.
• Collaborate with engineering to fix log source and alert issues.
• Update security run books and automation.
• Support vulnerability management and incident response activities.

Skills

Network architecture

SIEM

Log management

Threat intelligence

Python

Bash

AWS

Cloud security

Digital forensics

On-call

Education

Bachelor’s degree in information security or related field

Job description

Vantor is seeking an experienced Cyber Operations Analyst to support the CSOC, perform incident response, and analyze security alerts. The role requires ability to obtain a TS/SCI clearance and work on-site in Westminster, CO.

You will investigate alerts, coordinate with IT teams, and participate in vulnerability management and incident response activities. The ideal candidate has strong knowledge of SIEM, log management, Python/Bash scripting, and cloud security (AWS), with a background in