Cyber Threat Detection & Incident Response Analyst

Agecareers; Columbus (OH); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

26 Days Paid Leave

Performance Bonuses

401(k) with Match

Health Benefits

Parental Leave

Military Differential Pay

Professional Growth

Shared Success

Job summary

AGE Solutions seeks an experienced Cybersecurity Incident Response & Threat Detection Analyst to monitor, detect, analyze, and respond to cyber threats in the Enterprise Network Environment, including 24x7x365 SIEM monitoring and OSINT-enabled investigations.

The role requires DoD TS with SCI eligibility, IAT-II and CSSP Incident Responder certifications, plus five years of experience; and the ability to script in SPL, Python, or PowerShell to enhance defenses.

Qualifications

• Five (5) years of relevant experience.
• Must possess a current DoD Top Secret Clearance with IT-I, T5 for SCI access.
• At least one IAT-II certification from the listed options.
• At least one CSSP Incident Responder certification from the listed options.
• Experience with security tools (firewall, IDS/IPS, antivirus, DLP, etc.) and defense-in-depth concepts.
• Ability to build scripts/tools to enhance threat detection and incident response (SPL, Python, PowerShell).

Responsibilities

• Monitor 24x7x365 cybersecurity operations and SIEM to detect threats.
• Investigate events indicating attack or compromise and respond.
• Monitor for APTs and low-and-slow attacks.
• Provide technical analysis and sustainment for cybersecurity tools.
• Develop scripts/tools to improve detection and response capabilities.

Skills

SIEM monitoring

OSINT use

Scripting (Python/SPL/PowerShell)

Defense-in-Depth

Threat detection & incident response

Tools

Firewall

IDS/IPS

Host-based Antivirus

DLP

Vulnerability Management

Forensics

Malware Analysis

Device Hardening

Job description

AGE Solutions seeks an experienced Cybersecurity Incident Response & Threat Detection Analyst to monitor, detect, analyze, and respond to cyber threats in the Enterprise Network Environment, including 24x7x365 SIEM monitoring and OSINT-enabled investigations.

The role requires DoD TS with SCI eligibility, IAT-II and CSSP Incident Responder certifications, plus five years of experience; and the ability to script in SPL, Python, or PowerShell to enhance defenses.