Threat Detection & Incident Response Analyst - Columbus

Markesman LLC; Columbus (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

Markesman Group in Columbus, OH, seeks a Cybersecurity Incident Response & Threat Detection Analyst to monitor SIEM, analyze logs, and coordinate incident response. You will investigate threats, conduct root-cause analysis, and enhance defenses using threat intel and OSINT. A strong scripting ability and experience with security technologies are required.

The role emphasizes Defense-in-Depth, cross-team collaboration, and maintaining enterprise security across the organization. U.S.

Qualifications

• 5+ years of relevant cybersecurity experience.
• 2+ years performing root-cause analysis of cybersecurity events and incidents.
• Knowledge across multiple security tech areas (firewalls, IDS/IPS, endpoint protection, DLP, etc.).
• Understanding of Defense-in-Depth.
• Ability to develop scripts and tools to support detection and incident response.

Responsibilities

• Monitor SIEM and other cybersecurity platforms to identify and respond to cyber threats
• Analyze logged events and network traffic for indications of attack or compromise
• Investigate Advanced Persistent Threats and low-and-slow adversary activity
• Perform cybersecurity incident detection, analysis, containment, and response
• Conduct root-cause analysis of cybersecurity events and incidents
• Analyze security alerts across multiple defensive security technologies
• Support enterprise cybersecurity tools and applications
• Apply Defense-in-Depth principles to improve enterprise security posture
• Use threat intelligence and OSINT to improve detection and response capabilities
• Develop scripts and tools to improve threat detection and incident response
• Support implementation and sustainment of defensive signatures and perimeter security controls
• Coordinate incident findings and response actions with cybersecurity stakeholders

Skills

Incident response

Threat detection

Root-cause analysis

Scripting

Python

PowerShell

SPL

Defense-in-Depth

Education

DoD Top Secret clearance

SCI access eligibility

IT-I Tier 5 eligibility

Tools

Firewalls

IDS/IPS

Endpoint protection

DLP

Vulnerability management

Forensics

Malware analysis

Device hardening

Job description

Markesman Group in Columbus, OH, seeks a Cybersecurity Incident Response & Threat Detection Analyst to monitor SIEM, analyze logs, and coordinate incident response. You will investigate threats, conduct root-cause analysis, and enhance defenses using threat intel and OSINT. A strong scripting ability and experience with security technologies are required.

The role emphasizes Defense-in-Depth, cross-team collaboration, and maintaining enterprise security across the organization. U.S.