Cybersecurity Incident Response & Threat Detection Analyst (Ohio)

Markesman Group; Whitehall (OH); On-site; USD 90,000 - 140,000; Full time

Job summary

Markesman Group in Columbus, Ohio is seeking a Cybersecurity Incident Response & Threat Detection Analyst to monitor security platforms, analyze events, and respond to threats. This role focuses on detecting intrusions, performing containment, and coordinating with stakeholders.

Candidates should have hands-on experience with defense-in-depth, scripting, and vulnerability management, and hold clearance eligibility.

Qualifications

• 5+ years of relevant cybersecurity experience.
• 2+ years performing root-cause analysis of cybersecurity events and incidents.
• Working knowledge of security technology areas such as firewalls, IDS/IPS, endpoint protection, DLP, vulnerability management, forensics, malware analysis, or device hardening.
• Understanding of Defense-in-Depth.
• Ability to develop scripts and tools supporting detection and incident response.
• Experience with SPL, Python, and/or PowerShell preferred.
• DoD Top Secret clearance
• Eligible for SCI access
• Eligible for IT-I Critical Sensitive / Tier 5 (T5) at proposal submission

Responsibilities

• Monitor SIEM and other cybersecurity platforms to identify and respond to cyber threats
• Analyze logged events and network traffic for indications of attack or compromise
• Investigate Advanced Persistent Threats and low-and-slow adversary activity
• Perform cybersecurity incident detection, analysis, containment, and response
• Conduct root-cause analysis of cybersecurity events and incidents
• Analyze security alerts across multiple defensive security technologies
• Support enterprise cybersecurity tools and applications
• Apply Defense-in-Depth principles to improve enterprise security posture
• Use threat intelligence and OSINT to improve detection and response capabilities
• Develop scripts and tools to improve threat detection and incident response
• Support implementation and sustainment of defensive signatures and perimeter security controls
• Coordinate incident findings and response actions with cybersecurity stakeholders

Skills

Threat detection

Root-cause analysis

Scripting (Python/PowerShell)

Defense-in-Depth

Incident response

Tools

Firewalls

IDS/IPS

Endpoint protection

DLP

Vulnerability management

Forensics

Malware analysis

Device hardening

Job description

Cybersecurity Incident Response & Threat Detection Analyst (Ohio)

Location Columbus

Responsibilities

• Monitor SIEM and other cybersecurity platforms to identify and respond to cyber threats
• Analyze logged events and network traffic for indications of attack or compromise
• Investigate Advanced Persistent Threats and low-and-slow adversary activity
• Perform cybersecurity incident detection, analysis, containment, and response
• Conduct root-cause analysis of cybersecurity events and incidents
• Analyze security alerts across multiple defensive security technologies
• Support enterprise cybersecurity tools and applications
• Apply Defense-in-Depth principles to improve enterprise security posture
• Use threat intelligence and OSINT to improve detection and response capabilities
• Develop scripts and tools to improve threat detection and incident response
• Support implementation and sustainment of defensive signatures and perimeter security controls
• Coordinate incident findings and response actions with cybersecurity stakeholders

Qualifications

• 5+ years of relevant cybersecurity experience
• 2+ years performing root-cause analysis of cybersecurity events and incidents
• Working knowledge of at least two security technology areas such as firewalls, IDS/IPS, endpoint protection, DLP, vulnerability management, forensics, malware analysis, or device hardening
• Understanding of Defense-in-Depth
• Ability to develop scripts and tools supporting detection and incident response
• Experience with SPL, Python, and/or PowerShell preferred
• DoD Top Secret clearance
• Eligible for SCI access
• Eligible for IT-I Critical Sensitive / Tier 5 (T5) at proposal submission

About the Organization

Markesman Group has gathered the nation's foremost experts in Cyber, ISR, Enterprise IT and Intelligence Analysis. We seek to lead with cutting edge technology, high quality development and best value services for both the government and commercial sectors. Our team combines passion, acumen, focus, patriotism, desire, dedication and the love for the job to create value for our customers. We pride ourselves in a rigorous selection process because not only do we want the best, we want the best to want us. Working closely together as part of a service-disabled veteran owned small business, we enjoy a family environment where teammates challenge and elevate each other every day. The Markesman family is always striving to solve tomorrow's problems, today.

We are an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. EOE/M/F/Vet/Disabled.