Remote Cybersecurity Incident Response Analyst

Amentum; Helena (MT); Remote; USD 68,000 - 80,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Cybersecurity Analyst focused on Incident Management for a fully remote, hands-on role to protect Amentum assets from cyber threats. You will design security controls and collaborate with MSSP/SOC to improve incident response, while handling 2nd-level SOC duties and log analysis.

Qualifications include U.S. citizenship, 2-3 years of relevant experience with a Bachelor's, Security+ or equivalent, and experience with Azure/KQL, Windows/Linux logs, SIEM, and playbooks.

Qualifications

• U.S. Citizen required.
• Two to three years of relevant experience with a Bachelor's degree.
• Current Security+ or similar certification.
• Experience with Threat Intelligence/Hunting using KQL/Microsoft Azure including M365.
• Experience with Windows/Linux log management and analysis.
• Experience in Incident Management and Breach Investigations.
• Experience creating playbooks and detection automations.
• Experience in SIEM Management.
• Ability to travel up to 10%.

Responsibilities

• Design, develop and implement security controls to protect information systems, enterprise applications and data.
• Work closely with MSSP/SOC to monitor and improve Incident Response services.
• Participate in 2nd-level SOC activities, responding to critical security incidents escalated by MSSP.
• Analyze, troubleshoot and investigate security-related IT system anomalies from platform reporting, network traffic, logs, and alerts.
• Optimize processes and tooling and automate recurring tasks.
• Provide off-hours support as needed.
• Maintain and update system and process documentation.
• Cover other assignments as needed.

Skills

Incident response

Threat hunting

KQL/Azure

M365

Time management

Communication

Self-starter

Education

Bachelor's degree in Computer Science / Information Systems or related field

Tools

Microsoft Sentinel

SIEM

Windows/Linux log management

Job description

Amentum is seeking a Cybersecurity Analyst focused on Incident Management for a fully remote, hands-on role to protect Amentum assets from cyber threats. You will design security controls and collaborate with MSSP/SOC to improve incident response, while handling 2nd-level SOC duties and log analysis.

Qualifications include U.S. citizenship, 2-3 years of relevant experience with a Bachelor's, Security+ or equivalent, and experience with Azure/KQL, Windows/Linux logs, SIEM, and playbooks.