Cyber Threat Detection & Incident Response Analyst

ELECTROSOFT; Columbus (OH); On-site; USD 130,000 - 140,000; Full time

Job summary

Electrosoft Services, LLC in Columbus, OH is seeking a Cybersecurity Incident Response & Threat Detection Analyst to monitor, detect, and respond to security events around the clock within the Enterprise Network Environment.

The role requires five years of relevant experience, strong root-cause analysis, and hands-on use of firewall, IDS/IPS, and other security tools; you will also craft detections with SPL, Python, and PowerShell.

Qualifications

• Five (5) years relevant experience in cybersecurity incident response.
• Two (2) years performing root cause analysis of cybersecurity events and incidents.
• Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus, Data loss prevention, Vulnerability Management, Forensics, Malware Analysis, Device Hardening
• Ability to build scripts/tools to enhance threat detection and incident response (SPL, Python, PowerShell)
• Must possess IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission; DOD TOP SECRET Clearance and SCI access eligibility

Responsibilities

• Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to threats.
• Reviews logged events for trends indicative of attack or compromise within the environment.
• Maintains awareness of threats using OSINT and other intelligence resources.
• Provides technical analysis and sustainment support for cybersecurity tools and applications.

Skills

Root cause analysis

Threat detection

Python scripting

PowerShell scripting

Tools

Firewall

IDS/IPS

Data Loss Prevention

Vulnerability Management

Forensics

Malware Analysis

Job description

Electrosoft Services, LLC in Columbus, OH is seeking a Cybersecurity Incident Response & Threat Detection Analyst to monitor, detect, and respond to security events around the clock within the Enterprise Network Environment.

The role requires five years of relevant experience, strong root-cause analysis, and hands-on use of firewall, IDS/IPS, and other security tools; you will also craft detections with SPL, Python, and PowerShell.