Cybersecurity Incident Response & Threat Detection Analyst

ELECTROSOFT; Columbus (OH); On-site; USD 130,000 - 140,000; Full time

Job summary

Electrosoft Services, LLC in Columbus, OH is seeking a Cybersecurity Incident Response & Threat Detection Analyst to monitor, detect, and respond to security events around the clock within the Enterprise Network Environment.

The role requires five years of relevant experience, strong root-cause analysis, and hands-on use of firewall, IDS/IPS, and other security tools; you will also craft detections with SPL, Python, and PowerShell.

Qualifications

• Five (5) years relevant experience in cybersecurity incident response.
• Two (2) years performing root cause analysis of cybersecurity events and incidents.
• Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus, Data loss prevention, Vulnerability Management, Forensics, Malware Analysis, Device Hardening
• Ability to build scripts/tools to enhance threat detection and incident response (SPL, Python, PowerShell)
• Must possess IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission; DOD TOP SECRET Clearance and SCI access eligibility

Responsibilities

• Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to threats.
• Reviews logged events for trends indicative of attack or compromise within the environment.
• Maintains awareness of threats using OSINT and other intelligence resources.
• Provides technical analysis and sustainment support for cybersecurity tools and applications.

Skills

Root cause analysis

Threat detection

Python scripting

PowerShell scripting

Tools

Firewall

IDS/IPS

Data Loss Prevention

Vulnerability Management

Forensics

Malware Analysis

Job description

Cybersecurity Incident Response & Threat Detection Analyst

Columbus, OH

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation.We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel - and the knowledge that outstanding effort is recognized and rewarded.The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more.

Cybersecurity Incident Response & Threat Detection Analyst

Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment. Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity. Employs Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats. Reviews logged events for trends that are indicative of attack or compromise within the environment. Actively monitors logs and traffic for Advanced Persistent Threats (APT) and \"low and slow\" attacks within the environment. Maintains awareness of possible threats with the use of intelligence resources which include Open-Source Intelligence (OSINT). Provides technical analysis and sustainment support for the enterprise for Cybersecurity tools and applications and assists with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats.

• Five (5) years relevant experience
• Two (2) years performing root cause analysis of cybersecurity events and incidents.
• Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus, Data loss prevention, Vulnerability Management, Forensics, Malware Analysis, Device Hardening
• Understanding of Defense-in-Depth
• Ability to build scripts and tools to enhance threat detection and incident response capabilities (Preferably in SPL, Python, PowerShell)
• Must possess IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.
• Must possess a DOD TOP SECRET Clearance and be eligible for an IT-1 and be eligible for SCI access

The actual base salary offered will be determined based based on a variety of factors, including, but not limited to, the candidate’s relevant years and depth of experience, skills and qualifications, education, certifications, internal equity, and the specific requirements of the position. Candidates should not assume they will be offered the top of the posted range, as compensation is based on the individual qualifications and overall fit for the role.

Salary Range

$130,000 - $140,000 USD

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not