Remote Cybersecurity Incident Analyst

Amentum; Lansing (MI); Remoto; USD 68.000 - 80.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health, dental, and vision insurance

Paid time off and holidays

Retirement benefits (401(k) matching)

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Descrizione del lavoro

Amentum is seeking a Cybersecurity Analyst with focus on Incident Management. This is a fully remote and hands-on role, responsible for ensuring Amentum assets are protected from cyber threats.

Responsibilities include designing security controls, collaborating with MSSP/SOC, handling 2nd-level SOC activities, and automating tasks. Ideal candidates have 2–3 years of relevant experience, Security+ or equivalent, and Azure/M365 expertise.

Competenze

• Typically two to three years of relevant experience with Bachelor’s degree in Computer Science, Information Systems or related field
• Current Security+ or similar industry certification
• Solid experience in Threat Intelligence/Hunting using KQL; Microsoft Azure experience, including M365
• Experience with Windows/Linux log management and analysis
• Experience in Incident Management and Breach Investigations
• Experience creating playbooks and detection automations
• Experience in SIEM Management
• Ability to travel up to 10%

Mansioni

• Design, develop and implement security controls to protect information systems, enterprise applications and data
• Work closely with our MSSP/SOC to monitor and improve Incident Response services
• Participate in 2nd-level Security Operations Center (SOC) activities, e.g. respond to critical security incidents escalated by a MSSP
• Analyze, troubleshoot and investigate security-related IT system anomalies based on platform reporting, network traffic, log files and automated security alerts
• Optimize processes/tooling and automate recurring tasks
• Provide off-hours support on an infrequent, but as needed basis
• Maintain and update relevant system and process documentation
• Cover other assignments as needed

Conoscenze

MITRE ATT&CK

Time management

Communication

Self-starter

Formazione

Bachelor’s degree in CS/IS or related field

Security+ certification

Strumenti

KQL

Microsoft Azure

M365

SIEM management

Descrizione del lavoro

Amentum is seeking a Cybersecurity Analyst with focus on Incident Management. This is a fully remote and hands-on role, responsible for ensuring Amentum assets are protected from cyber threats.

Responsibilities include designing security controls, collaborating with MSSP/SOC, handling 2nd-level SOC activities, and automating tasks. Ideal candidates have 2–3 years of relevant experience, Security+ or equivalent, and Azure/M365 expertise.