Hybrid Cyber Defense Response Analyst II: DFIR & Forensics

CME Chicago Mercantile Exchange Inc.; New York (NY); Híbrido; USD 103.000 - 172.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

SANS training

Professional development programs

Descripción de la vacante

CME Group in New York seeks a mid‑level Cyber Defense Response Analyst II to join a hybrid security team. You will perform incident response, forensics, and threat hunting across multi‑cloud environments, leveraging Python and REST APIs to automate tools and workflows.

The role requires 2+ years in DFIR, with strong SIEM experience and hands‑on with leading forensics tools. A focus on high‑quality documentation and collaboration completes the profile.

Formación

• 2+ years of DFIR, incident handling, or malware analysis.
• 2+ years with QRadar, Sentinel, Splunk, Chronicle, ArcSight, or similar.
• 2+ years using leading forensics tools: KAPE, EnCase, Cellebrite, FTK, Magnet AXIOM, Autopsy.
• Strong IT fundamentals: networking and operating systems in cybersecurity contexts.
• Python development for data manipulation (Pandas) and REST APIs.
• Cloud experience: AWS, GCP, or Azure.

Responsabilidades

• Drive the full incident response lifecycle from triage to remediation, including endpoint forensics and malware analysis in a multi‑cloud environment.
• Conduct regular threat hunts to identify misconfigurations and detection gaps.
• Build/integrate security tools using Python and REST APIs, coordinating with automation engineers for advanced use‑cases.
• Lead tabletop exercises to improve team readiness.
• Contribute to internal incident response runbooks and playbooks with current workflows.

Conocimientos

DFIR

SIEM

Forensics tools

Malware analysis

Networking basics

Python

Cloud

QRadar

Endpoint Forensics

Educación

BA/BS in Engineering, CS or InfoSec

GCIH/GCFE/GCFA/OSCP/Sec+ certifications

Herramientas

KAPE

EnCase

Cellebrite

FTK

Magnet AXIOM

Autopsy

Ghidra

IDA Pro

PEStudio

x64dbg

Descripción del empleo

CME Group in New York seeks a mid‑level Cyber Defense Response Analyst II to join a hybrid security team. You will perform incident response, forensics, and threat hunting across multi‑cloud environments, leveraging Python and REST APIs to automate tools and workflows.

The role requires 2+ years in DFIR, with strong SIEM experience and hands‑on with leading forensics tools. A focus on high‑quality documentation and collaboration completes the profile.