Cyber Threat Hunter & Incident Response Analyst

Enterprise Solutions & Management; Columbus (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

Enterprise Solutions and Management (ESM) is seeking a Cybersecurity Incident Response & Threat Detection Analyst to support an enterprise-level program within a federal environment. The role involves 24x7 monitoring of SIEM and cybersecurity tools, analyzing events and logs to identify threats, and applying threat intelligence to guide defensive actions.

Responsibilities include detecting advanced threats, validating indicators of compromise, and providing sustainment support for security tools

Qualifications

• Five (5) years relevant cybersecurity experience.
• Two (2) years performing root cause analysis of cybersecurity events and incidents.
• Must maintain CSSP Analyst certification by having one of the following or equivalent - (CEH, CFR, GCIA, GCISP)
• Top Secret clearance

Responsibilities

• Participates in 24x7x365 monitoring of SIEM and cybersecurity tools to detect, analyze, and respond to threats and unauthorized activity across the enterprise network.
• Reviews security events, logs, and network traffic to identify trends, APTs, and indicators of compromise.
• Uses threat intelligence and OSINT to stay aware of emerging threats and inform defensive actions.
• Provides technical analysis and sustainment support for cybersecurity tools and applications and assists with implementing defense-in-depth signatures and perimeter controls.

Skills

SIEM

Threat detection

Threat intelligence

OSINT

Incident response

Scripting

Python

PowerShell

Education

CSSP Analyst certification

Top Secret clearance

Tools

Firewall

IDS/IPS

Host-based antivirus

Data Loss Prevention

Vulnerability Management

Forensics

Malware Analysis

Device Hardening

Job description

Enterprise Solutions and Management (ESM) is seeking a Cybersecurity Incident Response & Threat Detection Analyst to support an enterprise-level program within a federal environment. The role involves 24x7 monitoring of SIEM and cybersecurity tools, analyzing events and logs to identify threats, and applying threat intelligence to guide defensive actions.

Responsibilities include detecting advanced threats, validating indicators of compromise, and providing sustainment support for security tools