Remote Cybersecurity Incident Analyst

Amentum; Austin (TX); Remoto; USD 68.000 - 80.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health/dental/vision insurance

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Descrizione del lavoro

Amentum is seeking a Cybersecurity Analyst focused on Incident Management in a fully remote capacity. You will protect Amentum assets from cyber threats and work closely with MSSP/SOC to improve incident response.

Responsibilities include designing security controls, analyzing incidents, automating tasks, and maintaining documentation. Candidates should have Security+ or equivalent, 2–3 years of experience, and Azure/M365 expertise.

Competenze

• Two to three years of relevant experience with a Bachelor’s degree in CS/IS or related field.
• Current Security+ or similar industry certification.
• Solid experience in Threat Intelligence/Hunting using KQL and Microsoft Azure including M365.
• Experience with Windows/Linux log management and analysis.
• Experience in Incident Management and Breach Investigations.
• Experience creating playbooks and detection automations.
• Experience in SIEM Management.
• Ability to travel up to 10%.

Mansioni

• Design, develop and implement security controls to protect information systems, enterprise applications and data.
• Work closely with MSSP/SOC to monitor and improve Incident Response services.
• Participate in 2nd-level SOC activities, responding to critical security incidents escalated by MSSP.
• Analyze, troubleshoot and investigate security-related IT system anomalies based on reporting, logs and alerts.
• Automate recurring tasks and optimize tooling and processes.
• Provide off-hours support on an infrequent basis.
• Maintain and update system and process documentation.
• Cover other assignments as needed.

Conoscenze

Cybersecurity fundamentals

Threat analysis

Effective communication

Self-starter

Formazione

Bachelor's degree in CS/IS

Security+ certification

Strumenti

Microsoft Azure

M365

SIEM

KQL

Microsoft Sentinel

Playbooks

PowerShell

Python

Descrizione del lavoro

Amentum is seeking a Cybersecurity Analyst focused on Incident Management in a fully remote capacity. You will protect Amentum assets from cyber threats and work closely with MSSP/SOC to improve incident response.

Responsibilities include designing security controls, analyzing incidents, automating tasks, and maintaining documentation. Candidates should have Security+ or equivalent, 2–3 years of experience, and Azure/M365 expertise.