Remote Cybersecurity Incident Response Analyst

Amentum; Juneau (AK); Remote; USD 68,000 - 80,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Cybersecurity Analyst focused on Incident Management. This fully remote, hands-on role protects Amentum assets from cyber threats and collaborates with MSSP/SOC to strengthen Incident Response services.

You will design security controls, analyze incidents, automate tasks, and support 2nd-level SOC activities. Requires Security+ and Azure/M365 experience, plus 2–3 years in the field.

Qualifications

• Two to three years of relevant experience with a Bachelor’s degree in Computer Science, Information Systems or related field
• Current Security+ or similar industry certification
• Solid experience in Threat Intelligence/Hunting using KQL
• Microsoft Azure experience, including M365
• Experience with Windows/Linux log management and analysis
• Experience in Incident Management and Breach Investigations
• Experience creating playbooks and detection automations
• Experience in SIEM Management
• Ability to travel up to 10%

Responsibilities

• Design, develop and implement security controls to protect information systems, enterprise applications and data
• Work closely with MSSP/SOC to monitor and improve Incident Response services
• Participate in 2nd-level Security Operations Center (SOC) activities, e.g. respond to critical security incidents escalated by a MSSP
• Analyze, troubleshoot and investigate security-related IT system anomalies based on platform reporting, network traffic, log files and automated security alerts
• Optimize processes/tooling and automate recurring tasks
• Provide off-hours support on an infrequent, but as needed basis
• Maintain and update relevant system and process documentation
• Cover other assignments as needed

Skills

Incident management

Threat hunting

KQL

Azure

M365

SIEM management

Windows/Linux log management

MITRE ATT&CK

Communication skills

Self-starter

Education

Bachelor’s degree in CS/IS or related field

Tools

Microsoft Sentinel

PowerShell

Python

Job description

Amentum is seeking a Cybersecurity Analyst focused on Incident Management. This fully remote, hands-on role protects Amentum assets from cyber threats and collaborates with MSSP/SOC to strengthen Incident Response services.

You will design security controls, analyze incidents, automate tasks, and support 2nd-level SOC activities. Requires Security+ and Azure/M365 experience, plus 2–3 years in the field.