Cybersecurity Incident Response & Threat Detection Analyst with Security Clearance

Connected Logistics; Mount Air (OH); On-site; USD 83,000 - 117,000; Part time

Job summary

Connected Logistics is seeking a Cybersecurity Incident Response & Threat Detection Analyst to support the DLA Columbus, Ohio mission. You will monitor security events, investigate incidents, perform root-cause analysis, and respond to threats across SIEM and related technologies in a 24x7 environment.

The ideal candidate has TS clearance eligibility for IT-1 and SCI access, CSSP Analyst certification, and hands-on experience with threat intel, OSINT, and scripting in Python/PowerShell to

Qualifications

• Requires active DOD TOP SECRET clearance eligibility for IT-1 and SCI access
• CSSP Analyst certification (e.g., CEH, CySA) required
• Experience with root-cause analysis of security events
• Proficient in scripting for threat detection (Python, PowerShell, SPL)
• Two years of root-cause analysis experience sought
• Five years of relevant cybersecurity experience preferred
• Knowledge of multiple security tools (firewalls, IDS/IPS, EDR, DLP, vulnerability mgmt)

Responsibilities

• Monitor SIEM and cybersecurity tools 24x7x365 to identify threats and indicators of compromise.
• Investigate, analyze, and respond to cybersecurity events and incidents across enterprise networks.
• Perform root-cause analysis to identify sources, impacts, and contributing factors.
• Review logs, alerts, and network traffic for attacker patterns and anomalies.
• Monitor for APTs and other sophisticated threats and respond to containment actions.
• Develop scripts/tools to enhance threat detection and incident response capabilities.
• Maintain documentation of events, investigations, and responses per operational requirements.
• Stay current on threats, attack techniques, and defensive practices; maintain CSSP certification

Job description

Cybersecurity Incident Response & Threat Detection Analyst

DLA Columbus, Ohio Columbus, OH Description

Contingent Contract Award- Potential Start Date November 30, 2026

Bring your cybersecurity expertise to a mission that matters. Connected Logistics is seeking an experienced Cybersecurity Incident Response & Threat Detection Analyst to support the Defense Logistics Agency (DLA) in protecting critical enterprise systems and networks from evolving cyber threats. As part of a 24x7x365 cybersecurity mission, you will monitor and analyze security events, investigate potential incidents, identify indicators of compromise, and respond to sophisticated threats, including Advanced Persistent Threats and "low and slow" attack activity. You will work across SIEM and other cybersecurity technologies, leverage threat intelligence and OSINT, conduct root cause analysis, and help strengthen enterprise defense-in-depth capabilities. This opportunity is ideal for a cleared cybersecurity professional who thrives in a mission-focused environment where threat detection, technical analysis, and rapid response directly contribute to protecting critical defense operations.

Key Responsiblities

• Monitor SIEM platforms and other cybersecurity monitoring tools within a 24x7x365 operational environment to identify potential security threats, suspicious activity, and indicators of compromise.
• Detect, analyze, investigate, and respond to cybersecurity events and incidents affecting the enterprise network environment.
• Perform root cause analysis of cybersecurity events and incidents to identify the source, impact, and contributing factors.
• Review and analyze security logs, alerts, and network traffic to identify trends and activity indicative of an attack or compromise.
• Proactively monitor for Advanced Persistent Threats (APTs), "low and slow" attacks, and other sophisticated or emerging cyber threats.
• Execute appropriate incident response actions to help contain, mitigate, and respond to unauthorized or malicious activity within the environment.
• Leverage cybersecurity intelligence resources, including Open Source Intelligence (OSINT), to maintain awareness of current and emerging threats.
• Analyze information from multiple security technologies, including firewalls, IDS/IPS, host-based antivirus, data loss prevention, vulnerability management, digital forensics, malware analysis, and device hardening tools.
• Provide technical analysis and sustainment support for enterprise cybersecurity tools and applications.
• Assist with the implementation and application of Defense-in-Depth security controls, signatures, and perimeter defenses designed to reduce network threats.
• Develop and maintain scripts, tools, and automation that enhance threat detection and incident response capabilities, using technologies such as SPL, Python, and PowerShell.
• Document cybersecurity events, investigative findings, analysis, and response activities in accordance with applicable operational requirements.
• Maintain required CSSP Analyst certification and remain current on cybersecurity threats, attack techniques, and defensive practices.

Requirements

• Must possess a DOD TOP SECRET Clearance and be eligible for an IT-1 and be eligible for SCI access.
• Must have an active CSSP Analyst certification (ex, CEH, CySA) and provide proof of certification.
• Five (5) years relevant experience.
• Two (2) years performing root cause analysis of cybersecurity events and incidents.
• Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus, Data loss prevention, Vulnerability Management, Forensics, Malware Analysis, and Device Hardening.
• Understanding of Defense-in-Depth.
• Ability to build scripts and tools to enhance threat detection and incident response capabilities; (Preferably in SPL, Python, PowerShell)