Cyber Security Incident Analyst-Columbus, OH with Security Clearance

Sawdey Solution Services, Inc.; Columbus (OH); Remote; USD 90,000 - 130,000; Full time

Job summary

Sawdey Solution Services, Inc. is seeking a Cyber Security Incident Response & Threat Detection Analyst for telework. The role participates in 24x7x365 monitoring of SIEM and other cybersecurity tools to detect and respond to threats across the Enterprise Network Environment.

You will review logs for attack indicators, monitor for APTs and low-and-slow threats, analyze events, and support defensive operations using OSINT and defense-in-depth techniques. Top Secret clearance is required.

Qualifications

• Five (5) years relevant experience.
• Two (2) years performing root cause analysis of cybersecurity events and incidents.
• Understanding of Defense-in-Depth.
• Ability to build scripts and tools to enhance threat detection and incident response capabilities.

Responsibilities

• Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment.
• Reviews logged events for trends indicative of attack or compromise within the environment.
• Maintains awareness of possible threats with OSINT and uses cyber defense tools to diminish network threats.

Skills

Root cause analysis

Threat detection

Incident response

Cybersecurity monitoring

Tools

Firewall

IDS/IPS

Host-based antivirus

Job description

CYBER SECURITY INCIDENT RESPONSE & THREAT DETECTION ANALYST - Telework

Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment. Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity. Employs Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats. Reviews logged events for trends that are indicative of attack or compromise within the environment. Actively monitors logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks within the environment. Maintains awareness of possible threats with the use of intelligence resources which include Open Source Intelligence (OSINT). Provides technical analysis and sustainment support for the enterprise for Cybersecurity tools and applications and assists with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats.

Minimum Requirements:

• Five (5) years relevant experience
• Two (2) years performing root cause analysis of cybersecurity events and incidents.
• Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus,

Data loss prevention, Vulnerability Management, Forensics, Malware Analysis, Device Hardening

• Understanding of Defense-in-Depth
• Ability to build scripts and tools to enhance threat detection and incident response capabilities

• Clearance Requirement: Top Secret