Cyber Threat Detection & Incident Response Analyst

Esmcorp; Columbus (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

Enterprise Solutions and Management (ESM) is seeking a Cybersecurity Incident Response & Threat Detection Analyst to support an enterprise-level program within a federal environment. The role involves monitoring SIEM and cybersecurity tools around the clock to detect, analyze, and respond to threats and unauthorized activity across the network.

The ideal candidate has experience with multiple security tools (firewall, IDS/IPS, DLP), is adept at threat intelligence, OSINT, and script development

Qualifications

• Five (5) years relevant experience.
• Two (2) years performing root cause analysis of cybersecurity events and incidents.
• Must maintain CSSP Analyst certification by having one of the listed certs.

Responsibilities

• Participates in 24x7x365 monitoring of SIEM and cybersecurity tools to detect, analyze, and respond to threats and unauthorized activity across the enterprise network.
• Reviews security events, logs, and network traffic to identify trends, APTs, and indicators of compromise.
• Uses threat intelligence and OSINT to stay aware of emerging threats and inform defensive actions.
• Provides technical analysis and sustainment support for cybersecurity tools and applications.
• Assists with implementing defense-in-depth signatures and perimeter controls to mitigate network threats.

Skills

SIEM monitoring

Threat detection & incident response

Threat intelligence

Scripting (Python/PowerShell)

Defense-in-depth controls

Education

CSSP Analyst certification (CEH/CFR/GCIA/GCISP)

Tools

Firewall

IDS/IPS

Host-based antivirus

Data Loss Prevention

Vulnerability Management

Forensics

Job description

Enterprise Solutions and Management (ESM) is seeking a Cybersecurity Incident Response & Threat Detection Analyst to support an enterprise-level program within a federal environment. The role involves monitoring SIEM and cybersecurity tools around the clock to detect, analyze, and respond to threats and unauthorized activity across the network.

The ideal candidate has experience with multiple security tools (firewall, IDS/IPS, DLP), is adept at threat intelligence, OSINT, and script development