Cybersecurity Incident Response & Threat Detection Analyst
Horizon Industries Columbus, Ohio, United States
IT Services and IT Consulting · 201-500 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The analyst will monitor SIEM tools 24/7 to detect, analyze, and respond to cybersecurity threats and unauthorized activity within the enterprise network. They will also perform technical analysis, maintain cybersecurity tools, and apply defense-in-depth signatures to mitigate network risks.
What they look for
Requirements
Candidates must have at least five years of relevant experience, including two years of root cause analysis, and possess a DoD Top Secret/SCI clearance. Proficiency in security tools and scripting languages like Python or PowerShell is required.
Benefits
Full description
CYBERSECURITY INCIDENT RESPONSE & THREAT DETECTION ANALYST
Location: Columbus, OH
Security Clearance: Must possess a Top Secret, SCI Clearance.
_______________________________________________________________
Who We Are
Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area. Founded in 1996, Horizon Industries Limited (Horizon) has evolved into a company of highly qualified professionals that provides full-cycle IT Consultant and Management support in both the private and public sectors.
Horizon’s culture is based on our core values, and we PRIDE ourselves on a diverse, employee, and family-centric approach.
Key Responsibilities
Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment. Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity. Employs Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats. Reviews logged events for trends that are indicative of attack or compromise within the environment. Actively monitors logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks within the environment. Maintains awareness of possible threats with the use of intelligence resources which include Open Source Intelligence (OSINT). Provides technical analysis and sustainment support for the enterprise for Cybersecurity tools and applications and assists with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats.
Minimum Requirements
- Five (5) years relevant experience
- Two (2) years performing root cause analysis of cybersecurity events and incidents.
- Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus,
- Data loss prevention, Vulnerability Management, Forensics, Malware Analysis, Device Hardening Understanding of Defense-in-Depth
- Ability to build scripts and tools to enhance threat detection and incident response capabilities (Preferably in SPL, Python, PowerShell)
- Must possess a DoD Top Secret, SCI clearance.
Why you will love working with us/ Perks
- A comprehensive benefits package including healthcare (medical, dental, vision and disability)
- a 401k program where you are 100% vested from day one with an employer match after 90 days.
- an Educational Assistance program.
- a Student Loan Repayment Program
- Gym Reimbursement Program.
- Paid Time off
- Dynamics, passionate, multi-disciplinary team of creative minds to work with and many more.
Horizon is an Equal Employment Opportunity employer, and it is our policy to consider all applicants for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.
EOE/Vet/Disabled
Similar roles
-
Cybersecurity Advisory Consultant
Bitdefender Romania
-
Copy of Спеціаліст з інформаційної безпеки / Cybersecurity specialist
Leroy Merlin Ukraine Kyiv, Ukraine
-
CyberSecurity Analyst (Application Security)
FPT Asia Pacific Pte Ltd Singapore, Singapore
-
[LPS] Cybersecurity Consultant
Lenovo Hong Kong, Hong Kong Island, Hong Kong S.A.R.
-
Internal Audit – Foundation Engineering / Tech Risk and Cybersecurity, Associate, Singapore
Goldman Sachs Singapore
-
Senior Security Engineer (Splunk)
NCS Singapore, Singapore