Remote Threat Detection & Incident Response Analyst

BMA; Virginia; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health coverage

Dental/Vision

ESOP

401(k) match

Job summary

BMA is seeking a Cybersecurity Incident Response & Threat Detection Analyst to join our team for an upcoming proposal effort. This is a remote, contingent position dependent on contract award.

The role involves 24x7 monitoring of SIEM and other cybersecurity tools to detect and respond to threats within the Enterprise Network Environment, with duties including analysis, defense-in-depth implementation, and OSINT-based threat awareness.

Qualifications

• Five (5) years of relevant experience.
• Two (2) years of experience performing root cause analysis of cybersecurity events and incidents.
• Knowledge of at least two types of security tools (Firewall, IDS/IPS, host-based antivirus, DLP, VM, Forensics, Malware Analysis, or Device Hardening).
• Understanding of Defense-in-Depth.
• Ability to build scripts and tools to enhance threat detection and incident response, preferably using SPL, Python, or PowerShell.

Responsibilities

• Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to threats.
• Protects, monitors, detects, analyzes, and responds to unauthorized activity within the Enterprise Network Environment.
• Reviews logged events for trends indicating attack or compromise and monitors for APT and low-and-slow attacks.
• Maintains awareness of threats using OSINT resources.
• Provides technical analysis and sustainment support for cybersecurity tools and assists with defense-in-depth measures.

Skills

Experience

Root cause analysis

Defense-in-Depth

Scripting (Python/SPL/PowerShell)

Tools

Firewall

IDS/IPS

Host-based antivirus

Data Loss Prevention

Vulnerability Management

Forensics

Malware Analysis

Device Hardening

Job description

BMA is seeking a Cybersecurity Incident Response & Threat Detection Analyst to join our team for an upcoming proposal effort. This is a remote, contingent position dependent on contract award.

The role involves 24x7 monitoring of SIEM and other cybersecurity tools to detect and respond to threats within the Enterprise Network Environment, with duties including analysis, defense-in-depth implementation, and OSINT-based threat awareness.