Remote Cybersecurity Incident Analyst

Amentum; City of Albany (NY); Remote; USD 68,000 - 80,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Paid time off

Holidays

Retirement benefits (401(k) matching)

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Cybersecurity Analyst focused on Incident Management. This remote, hands-on role ensures Amentum assets are protected from cyber threats and requires collaboration with MSSP/SOC teams.

Responsibilities include developing security controls, monitoring incident response, and contributing to 2nd-level SOC activities. Qualified candidates have Security+ or equivalent, Azure/M365 experience, and SIEM expertise.

Qualifications

• Must be a U.S. Citizen.
• Typically, two to three years of relevant experience with Bachelor’s degree in Computer Science, Information Systems or related field.
• Current Security+ or similar industry certification.
• Solid experience in Threat Intelligence/Hunting using KQL and Microsoft Azure, including M365.
• Experience with Windows/Linux log management and analysis.
• Experience in Incident Management and Breach Investigations.
• Experience creating playbooks and detection automations.
• Experience in SIEM Management.
• Ability to travel up to 10%.

Responsibilities

• Design, develop and implement security controls to protect information systems, enterprise applications and data.
• Work closely with our MSSP/SOC to monitor and improve Incident Response services.
• Participate in 2nd-level Security Operations Center (SOC) activities, e.g. respond to critical security incidents escalated by a MSSP.
• Analyze, troubleshoot and investigate security-related IT system anomalies based on platform reporting, network traffic, log files and automated security alerts.
• Optimize processes/tooling and automate recurring tasks.
• Provide off-hours support on an infrequent, but as needed basis.
• Maintain and update relevant system and process documentation.
• Cover other assignments as needed.

Skills

Security concepts & tech

MITRE ATT&CK familiarity

Time management

Strong communication

Autonomy

Self-starter

Education

Bachelor's degree in CS/IS

Tools

Microsoft Sentinel

KQL

Microsoft Azure

Job description

Amentum is seeking a Cybersecurity Analyst focused on Incident Management. This remote, hands-on role ensures Amentum assets are protected from cyber threats and requires collaboration with MSSP/SOC teams.

Responsibilities include developing security controls, monitoring incident response, and contributing to 2nd-level SOC activities. Qualified candidates have Security+ or equivalent, Azure/M365 experience, and SIEM expertise.