Cyber Threat Detection & Incident Response Specialist

Connected Logistics; Mount Air (OH); On-site; USD 83,000 - 117,000; Part time

Job summary

Connected Logistics is seeking a Cybersecurity Incident Response & Threat Detection Analyst to support the DLA Columbus, Ohio mission. You will monitor security events, investigate incidents, perform root-cause analysis, and respond to threats across SIEM and related technologies in a 24x7 environment.

The ideal candidate has TS clearance eligibility for IT-1 and SCI access, CSSP Analyst certification, and hands-on experience with threat intel, OSINT, and scripting in Python/PowerShell to

Qualifications

• Requires active DOD TOP SECRET clearance eligibility for IT-1 and SCI access
• CSSP Analyst certification (e.g., CEH, CySA) required
• Experience with root-cause analysis of security events
• Proficient in scripting for threat detection (Python, PowerShell, SPL)
• Two years of root-cause analysis experience sought
• Five years of relevant cybersecurity experience preferred
• Knowledge of multiple security tools (firewalls, IDS/IPS, EDR, DLP, vulnerability mgmt)

Responsibilities

• Monitor SIEM and cybersecurity tools 24x7x365 to identify threats and indicators of compromise.
• Investigate, analyze, and respond to cybersecurity events and incidents across enterprise networks.
• Perform root-cause analysis to identify sources, impacts, and contributing factors.
• Review logs, alerts, and network traffic for attacker patterns and anomalies.
• Monitor for APTs and other sophisticated threats and respond to containment actions.
• Develop scripts/tools to enhance threat detection and incident response capabilities.
• Maintain documentation of events, investigations, and responses per operational requirements.
• Stay current on threats, attack techniques, and defensive practices; maintain CSSP certification

Job description

Connected Logistics is seeking a Cybersecurity Incident Response & Threat Detection Analyst to support the DLA Columbus, Ohio mission. You will monitor security events, investigate incidents, perform root-cause analysis, and respond to threats across SIEM and related technologies in a 24x7 environment.

The ideal candidate has TS clearance eligibility for IT-1 and SCI access, CSSP Analyst certification, and hands-on experience with threat intel, OSINT, and scripting in Python/PowerShell to