Remote Cybersecurity Incident Analyst

Amentum; Honolulu (HI); Remote; USD 68,000 - 80,000; Full time

Benefits offered by this job

Health insurance

Paid time off and holidays

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Cybersecurity Analyst focused on incident management. This remote, hands-on role protects Amentum assets from cyber threats and collaborates with MSSP/SOC for incident response.

You will design security controls, investigate incidents, and develop playbooks while supporting 2nd-level SOC activities and maintaining documentation. A U.S. citizen with Security+ and Azure/M365 experience is preferred.

Qualifications

• US citizen status required.
• Typically 2–3 years of relevant experience with a Bachelor’s degree.
• Current Security+ or equivalent certification.
• Solid experience in Threat Intelligence/Hunting using KQL and Azure/M365.
• Experience with Windows/Linux log management and analysis.
• Experience in Incident Management and Breach Investigations.
• Experience creating playbooks and detection automations.
• Experience in SIEM management.
• Ability to travel up to 10%.

Responsibilities

• Design, develop and implement security controls to protect information systems, applications and data.
• Coordinate with MSSP/SOC to monitor and improve Incident Response services.
• Participate in 2nd-level SOC activities reacting to incidents escalated by MSSP.
• Analyze, troubleshoot and investigate security-related IT anomalies from logs and alerts.
• Automate recurring tasks and optimize tooling and processes.
• Provide off-hours support on an infrequent basis.
• Maintain and update system and process documentation.
• Cover other assignments as needed.

Skills

Incident management

MSSP/SOC collaboration

Threat intelligence/hunting

Log analysis

MITRE ATT&CK

Azure/M365

SIEM management

Scripting (Python/PowerShell)

Communication/time management

Education

Bachelor’s degree in Computer Science or related field

Security+ certification

Tools

KQL

Microsoft Azure

Microsoft 365 (M365)

Job description

Amentum is seeking a Cybersecurity Analyst focused on incident management. This remote, hands-on role protects Amentum assets from cyber threats and collaborates with MSSP/SOC for incident response.

You will design security controls, investigate incidents, and develop playbooks while supporting 2nd-level SOC activities and maintaining documentation. A U.S. citizen with Security+ and Azure/M365 experience is preferred.