Cyber Operations Analyst — TS/SCI Eligible, Onsite CO

Vantor Holdings, Inc.; Westminster (CO); Presencial; USD 105.000 - 154.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401(k) with company match

Mental health resources

Student loan repayment assistance

Adoption reimbursement

Pet insurance

Descripción de la vacante

Vantor Holdings, Inc. in Westminster, CO is hiring an experienced Cyber Operations Analyst who must be able to obtain a TS/SCI clearance.

The role provides front-line incident response and investigation for the Cybersecurity Operations Center, addressing security alerts from SIEM and monitoring tools, and coordinating with IT teams. The candidate will monitor tools, escalate events as needed, assist vulnerability management, and participate in incident response activities.

Formación

• U.S. citizen with ability to obtain TS/SCI clearance.
• Willing to work on-site in Westminster, CO three days per week.
• Experience with SIEM and log-management and incident response.

Responsabilidades

• Monitor security tools and provide remediation.
• Escalate security events per process.
• Coordinate information gathering for IT teams.
• Triage and analyze real-time data feeds with MDR analysts.
• Collaborate with Cybersecurity Engineering to fix log sources and alerts.
• Implement changes to log sources/types and alerts.
• Support vulnerability management and zero-day awareness.
• Participate in Incident Response activities.

Conocimientos

Incident response

SIEM

Threat monitoring

Educación

Bachelor's degree in information security or related field

Herramientas

Python

Bash

AWS

Cloud security

Descripción del empleo

Vantor Holdings, Inc. in Westminster, CO is hiring an experienced Cyber Operations Analyst who must be able to obtain a TS/SCI clearance.

The role provides front-line incident response and investigation for the Cybersecurity Operations Center, addressing security alerts from SIEM and monitoring tools, and coordinating with IT teams. The candidate will monitor tools, escalate events as needed, assist vulnerability management, and participate in incident response activities.