Cybersecurity Incident Response & Threat Detection Analyst (Ohio)

Markesman LLC; Columbus (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

Markesman Group in Columbus, OH, seeks a Cybersecurity Incident Response & Threat Detection Analyst to monitor SIEM, analyze logs, and coordinate incident response. You will investigate threats, conduct root-cause analysis, and enhance defenses using threat intel and OSINT. A strong scripting ability and experience with security technologies are required.

The role emphasizes Defense-in-Depth, cross-team collaboration, and maintaining enterprise security across the organization. U.S.

Qualifications

• 5+ years of relevant cybersecurity experience.
• 2+ years performing root-cause analysis of cybersecurity events and incidents.
• Knowledge across multiple security tech areas (firewalls, IDS/IPS, endpoint protection, DLP, etc.).
• Understanding of Defense-in-Depth.
• Ability to develop scripts and tools to support detection and incident response.

Responsibilities

• Monitor SIEM and other cybersecurity platforms to identify and respond to cyber threats
• Analyze logged events and network traffic for indications of attack or compromise
• Investigate Advanced Persistent Threats and low-and-slow adversary activity
• Perform cybersecurity incident detection, analysis, containment, and response
• Conduct root-cause analysis of cybersecurity events and incidents
• Analyze security alerts across multiple defensive security technologies
• Support enterprise cybersecurity tools and applications
• Apply Defense-in-Depth principles to improve enterprise security posture
• Use threat intelligence and OSINT to improve detection and response capabilities
• Develop scripts and tools to improve threat detection and incident response
• Support implementation and sustainment of defensive signatures and perimeter security controls
• Coordinate incident findings and response actions with cybersecurity stakeholders

Skills

Incident response

Threat detection

Root-cause analysis

Scripting

Python

PowerShell

SPL

Defense-in-Depth

Education

DoD Top Secret clearance

SCI access eligibility

IT-I Tier 5 eligibility

Tools

Firewalls

IDS/IPS

Endpoint protection

DLP

Vulnerability management

Forensics

Malware analysis

Device hardening

Job description

Cybersecurity Incident Response & Threat Detection Analyst (Ohio)

Location Columbus

Responsibilities

• Monitor SIEM and other cybersecurity platforms to identify and respond to cyber threats
• Analyze logged events and network traffic for indications of attack or compromise
• Investigate Advanced Persistent Threats and low-and-slow adversary activity
• Perform cybersecurity incident detection, analysis, containment, and response
• Conduct root-cause analysis of cybersecurity events and incidents
• Analyze security alerts across multiple defensive security technologies
• Support enterprise cybersecurity tools and applications
• Apply Defense-in-Depth principles to improve enterprise security posture
• Use threat intelligence and OSINT to improve detection and response capabilities
• Develop scripts and tools to improve threat detection and incident response
• Support implementation and sustainment of defensive signatures and perimeter security controls
• Coordinate incident findings and response actions with cybersecurity stakeholders

Qualifications

• 5+ years of relevant cybersecurity experience
• 2+ years performing root-cause analysis of cybersecurity events and incidents
• Working knowledge of at least two security technology areas such as firewalls, IDS/IPS, endpoint protection, DLP, vulnerability management, forensics, malware analysis, or device hardening
• Understanding of Defense-in-Depth
• Ability to develop scripts and tools supporting detection and incident response
• Experience with SPL, Python, and/or PowerShell preferred
• DoD Top Secret clearance
• Eligible for SCI access
• Eligible for IT-I Critical Sensitive / Tier 5 (T5) at proposal submission

About the Organization

Markesman Group has gathered the nation's foremost experts in Cyber, ISR, Enterprise IT and Intelligence Analysis. We seek to lead with cutting edge technology, high quality development and best value services for both the government and commercial sectors. Our team combines passion, acumen, focus, patriotism, desire, dedication and the love for the job to create value for our customers. We pride ourselves in a rigorous selection process because not only do we want the best, we want the best to want us. Working closely together as part of a service-disabled veteran owned small business, we enjoy a family environment where teammates challenge and elevate each other every day. The Markesman family is always striving to solve tomorrow's problems, today.

We are an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. EOE/M/F/Vet/Disabled.