Remote Incident Response & Threat Detection Analyst

Beshenich Muir & Associates; Virginia (MN); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health coverage options

Dental & Vision coverage

401(k) with 6% match

ESOP

Job summary

BMA Technical Services, Inc. is seeking a Cybersecurity Incident Response & Threat Detection Analyst to monitor SIEM and related tools 24x7 and to respond to security threats across the Enterprise Network Environment.

The role requires experience in root cause analysis, multiple security tools, and scripting (SPL, Python, PowerShell). A DoD Top Secret clearance is required for proposal work, with eligibility for IT-I/ Tier 5 as needed.

Qualifications

• Five years of relevant cybersecurity experience.
• Two years of experience performing root cause analysis of incidents.
• Experience with at least two security tools (e.g., Firewall, IDS/IPS, DLP, Vulnerability Management, Forensics, Malware Analysis, or Device Hardening).
• Understanding of Defense‑in‑Depth.
• Ability to build scripts/tools to enhance threat detection and incident response (SPL, Python, or PowerShell).

Responsibilities

• Participate in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools.
• Detect and respond to cybersecurity threats within the Enterprise Network Environment.
• Review logs for trends indicating attack or compromise; monitor for APT and slow-moving threats.
• Maintain awareness of threats using OSINT and other intelligence sources.
• Provide technical analysis and sustainment support for cybersecurity tools and controls.

Skills

Root cause analysis

Threat detection tooling

SPL

Python

PowerShell

Firewall

IDS/IPS

Data Loss Prevention

Vulnerability Management

Forensics

Malware Analysis

Device Hardening

Defense-in-Depth

Tools

Firewall

IDS/IPS

Host-based antivirus

Data Loss Prevention

Vulnerability Management

Forensics

Malware Analysis

Device Hardening

Job description

BMA Technical Services, Inc. is seeking a Cybersecurity Incident Response & Threat Detection Analyst to monitor SIEM and related tools 24x7 and to respond to security threats across the Enterprise Network Environment.

The role requires experience in root cause analysis, multiple security tools, and scripting (SPL, Python, PowerShell). A DoD Top Secret clearance is required for proposal work, with eligibility for IT-I/ Tier 5 as needed.