Remote Cybersecurity Incident Response Analyst

Amentum; Topeka (KS); Remote; USD 68,000 - 80,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Cybersecurity Analyst focused on Incident Management. This fully remote, hands-on role ensures Amentum assets are protected from cyber threats while working closely with MSSP/SOC teams.

Key responsibilities include incident response, playbook creation, SIEM management, and continuous improvement of security tooling and processes. Requires U.S. citizenship and Security+ or equivalent certification.

Qualifications

• US citizenship is required.
• 2–3 years of relevant experience with a Bachelor’s degree in CS or related field.
• Active Security+ or equivalent certification.
• Experience with Threat Intelligence/Hunting using KQL and Microsoft Azure (incl. M365).
• Experience with Windows and Linux log management and analysis.
• Experience in Incident Management and breach investigations.
• Experience creating playbooks and detection automations.
• Experience in SIEM management.
• Ability to travel up to 10%.

Responsibilities

• Design, develop and implement security controls to protect information systems, applications and data.
• Collaborate with MSSP/SOC to monitor and improve Incident Response services.
• Participate in 2nd-level SOC activities and respond to critical incidents escalated by MSSP.
• Analyze and investigate security-related IT anomalies using logs and alerts.
• Automate recurring tasks and optimize tooling and processes.
• Provide off-hours support on infrequent basis.
• Maintain and update system and process documentation.
• Cover other assignments as needed.

Skills

MITRE ATT&CK

Time management

Communication

Self-starter

Education

Bachelor’s degree in Computer Science or related field

Tools

KQL

Microsoft Azure

M365

Job description

Amentum is seeking a Cybersecurity Analyst focused on Incident Management. This fully remote, hands-on role ensures Amentum assets are protected from cyber threats while working closely with MSSP/SOC teams.

Key responsibilities include incident response, playbook creation, SIEM management, and continuous improvement of security tooling and processes. Requires U.S. citizenship and Security+ or equivalent certification.