Elite Cyber Threat Detection & Incident Response Analyst

Confidential; United States; Remote; USD 95,000 - 140,000; Full time

Job summary

Confidential is seeking an experienced cybersecurity professional to participate in 24x7x365 monitoring of SIEM and related tools. You will detect and respond to threats, review logs for attack indicators, and monitor for APT and slow-moving threats across the enterprise network.

The role emphasizes technical analysis and sustainment of cybersecurity tooling, with responsibilities to enhance Defense-In-Depth perimeters and threat signatures, ensuring robust incident response capabilities.

Qualifications

• Five (5) years relevant experience in cybersecurity.
• Two (2) years performing root cause analysis of cybersecurity events and incidents.
• Working knowledge of at least two security tools (Firewall, IDS/IPS, HBA antivirus, DLP, Vulnerability Management, Forensics, Malware Analysis, Device Hardening).
• Understanding of Defense-in-Depth.
• Ability to build scripts and tools to enhance threat detection and incident response (SPL, Python, PowerShell).
• Must possess IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.
• Must possess a DOD TOP SECRET Clearance and be eligible for an IT-1 and SCI Access

Responsibilities

• Participates in 24x7x365 monitoring of SIEM and other cybersecurity tools to detect and respond to threats.
• Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity.
• Reviews logged events for trends indicative of attack or compromise.
• Monitors logs and traffic for APT and low-and-slow attacks.
• Provides technical analysis and sustainment support for cybersecurity tools and applications.
• Assists with Defense-In-Depth signatures and perimeter defense controls to diminish network threats.

Skills

Root cause analysis

Defense-in-Depth understanding

Scripting (SPL, Python, PowerShell)

Education

Technical degree or equivalent

Tools

Firewall

IDS/IPS

Host-based antivirus

Data loss prevention

Vulnerability Management

Forensics

Malware Analysis

Device Hardening

Job description

Confidential is seeking an experienced cybersecurity professional to participate in 24x7x365 monitoring of SIEM and related tools. You will detect and respond to threats, review logs for attack indicators, and monitor for APT and slow-moving threats across the enterprise network.

The role emphasizes technical analysis and sustainment of cybersecurity tooling, with responsibilities to enhance Defense-In-Depth perimeters and threat signatures, ensuring robust incident response capabilities.