Remote Cybersecurity Incident Analyst

Amentum; Lincoln (NE); Remote; USD 68,000 - 80,000; Full time

Benefits offered by this job

Health insurance

Paid time off

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Cybersecurity Analyst with a focus on Incident Management. This is a fully remote, hands-on role dedicated to ensuring Amentum assets are protected from cyber threats. You will design and implement security controls, work with MSSP/SOC to enhance incident response, and participate in 2nd-level SOC activities.

Qualifications include U.S. citizenship, 2–3 years of relevant experience with a Bachelor’s degree, Security+ or equivalent, and hands-on Azure/M365 experience.

Qualifications

• U.S. Citizenship is required.
• Bachelor’s degree with 2–3 years of relevant cybersecurity experience.
• Current Security+ or equivalent certification.
• Experience with Threat Intelligence/Hunting using KQL; Azure/M365 experience.

Responsibilities

• Design, develop and implement security controls to protect information systems, enterprise applications and data.
• Work closely with MSSP/SOC to monitor and improve Incident Response services.
• Participate in 2nd-level SOC activities, responding to critical incidents escalated by MSSP.
• Analyze, troubleshoot and investigate security-related IT system anomalies from logs, reports and alerts.
• Optimize processes/tools and automate recurring tasks.
• Provide off-hours support on an infrequent basis.
• Maintain and update system and process documentation.
• Cover other assignments as needed.

Skills

System and network security

MITRE ATT&CK familiarity

Time management

Communication skills

Self-starter

Education

Bachelor’s degree in Computer Science or related field

Security+ certification

Tools

KQL

Microsoft Azure

M365

SIEM management

PowerShell / Python scripting

Job description

Amentum is seeking a Cybersecurity Analyst with a focus on Incident Management. This is a fully remote, hands-on role dedicated to ensuring Amentum assets are protected from cyber threats. You will design and implement security controls, work with MSSP/SOC to enhance incident response, and participate in 2nd-level SOC activities.

Qualifications include U.S. citizenship, 2–3 years of relevant experience with a Bachelor’s degree, Security+ or equivalent, and hands-on Azure/M365 experience.