Remote Cybersecurity Incident Response Analyst

Amentum; Phoenix (AZ); Remote; USD 68,000 - 80,000; Full time

Benefits offered by this job

Health insurance

Paid time off

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability & life insurance

Pet insurance

Job summary

Amentum is seeking a Cybersecurity Analyst focused on Incident Management. This fully remote, hands-on role ensures Amentum assets are protected from cyber threats while enabling proactive security operations and timely incident response.

You will design and implement security controls, collaborate with MSSP/SOC, and participate in 2nd-level SOC activities, handling incidents and automations with a security-first mindset.

Qualifications

• U.S. citizenship required.
• 2–3 years of relevant cybersecurity experience.
• Current Security+ or equivalent certification.
• Experience with Threat Intelligence/Hunting using KQL and Microsoft Azure (M365).
• Experience with Windows/Linux log management and analysis.
• Experience in Incident Management and Breach Investigations.
• Experience creating playbooks and detection automations.
• Experience in SIEM management.
• Willing to travel up to 10%.

Responsibilities

• Design, develop and implement security controls to protect information systems, enterprise applications and data
• Work with MSSP/SOC to monitor and improve Incident Response services
• Participate in 2nd-level SOC activities, respond to critical incidents escalated by MSSP
• Analyze, troubleshoot and investigate security-related IT system anomalies
• Optimize processes/tooling and automate recurring tasks
• Provide off-hours support on an infrequent basis
• Maintain and update system and process documentation
• Cover other assignments as needed

Skills

Boundary protection

Network segmentation

Firewalls

Endpoint security

Threat hunting

Data protection

MITRE ATT&CK

Time management

Communication

Education

Bachelor’s degree in CS/IS or related field

Security+ certification

Tools

Microsoft Azure

Microsoft 365

SIEM management

Job description

Amentum is seeking a Cybersecurity Analyst focused on Incident Management. This fully remote, hands-on role ensures Amentum assets are protected from cyber threats while enabling proactive security operations and timely incident response.

You will design and implement security controls, collaborate with MSSP/SOC, and participate in 2nd-level SOC activities, handling incidents and automations with a security-first mindset.