Cybersecurity Investigator

🕒 September 14

🌪️ Kansas, Missouri – Remote

🌪️ Kansas – Remote 🏰 Missouri – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 24%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

BlueScope

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1928

🏭 Manufacturing

🏗️ Construction

Manufacturing • Sustainability • Construction

BlueScope is a global steel manufacturer committed to delivering sustainable and innovative solutions for its customers and communities. The company produces world-class steel products known for their durability, strength, and versatility across various industries and applications. BlueScope is dedicated to fostering sustainable practices that promote environmental responsibility, social engagement, and economic prosperity in their operations.

📋 Description

• Monitor and investigate security events and alerts from SIEM, endpoint detection and response, identity, email, cloud, network, and other cybersecurity technologies • Perform advanced triage and analysis of suspicious activity, potential policy violations, and confirmed security incidents • Analyze endpoint, identity, application, cloud, and network telemetry to determine incident scope, impact, and likely root cause • Correlate security telemetry, threat intelligence, and contextual information to distinguish malicious activity from expected business operations • Document investigative actions, evidence, findings, and conclusions • Serve as an escalation point for complex or high-risk investigations and guide less-experienced analysts • Coordinate and perform incident response activities, including identification, containment, eradication, recovery, and post-incident review • Investigate phishing, malware, ransomware, account compromise, insider threat, unauthorized access, data loss, and other cybersecurity events • Collect and preserve relevant evidence in accordance with established procedures and legal or regulatory requirements • Develop, maintain, and improve incident response playbooks, investigation procedures, and escalation workflows • Coordinate remediation with infrastructure, identity, application, cloud, networking, legal, human resources, and business stakeholders • Provide timely status updates and communicate incident risk, business impact, decisions, and required actions • Conduct proactive threat hunting using the MITRE ATT&CK framework and threat intelligence • Recommend and help develop detection use cases, correlation rules, hunting queries, dashboards, and investigation workflows • Tune detections to improve fidelity, reduce unnecessary alert volume, and strengthen threat coverage • Validate security controls and detections through investigative feedback, testing, and incident lessons learned • Identify recurring investigation patterns and recommend automation, orchestration, and process improvements • Develop and maintain operational metrics, case reporting, and trend analysis • Contribute to security operations procedures, knowledge articles, and analyst training materials • Support major incident exercises, tabletop exercises, cybersecurity assessments, audit requests, and risk-reduction initiatives • Collaborate with global and regional security, infrastructure, networking, identity, application, cloud, and operational technology teams • Prepare investigation reports, incident summaries, and executive-ready communications • Share investigative knowledge, mentor developing analysts, and promote consistent security operations practices • Build relationships with internal stakeholders and external security service providers • Maintain awareness of emerging threats, attacker behaviors, defensive technologies, and investigative techniques

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline; or equivalent education and practical experience • 4+ years of experience in cybersecurity, security operations, incident response, threat hunting, digital forensics, or cyber investigations • Experience working in a Security Operations Center or comparable security monitoring and response environment • Hands-on experience investigating alerts and incidents using SIEM, endpoint detection and response, identity, email, cloud, and network security technologies • Strong knowledge of Windows, Active Directory, Microsoft Entra ID, Microsoft 365, networking, authentication, and security event analysis • Experience investigating phishing, malware, ransomware, account compromise, insider threat, unauthorized access, or data protection incidents • Knowledge of incident response methodologies, evidence handling, threat intelligence, and the MITRE ATT&CK framework • Ability to analyze complex technical information, reach defensible conclusions, and communicate findings to technical and non-technical stakeholders • Strong written communication, documentation, organizational, troubleshooting, and problem-solving skills • Ability to participate in an on-call or after-hours response rotation when required for critical cybersecurity incidents • Certifications such as GCIH, GCIA, GCFA, CySA+, SC-200, CISSP, or comparable security credentials • Experience with SIEAM, XDR, SASE, or similar security operations platforms • Experience conducting cloud security investigations in Microsoft Azure or other cloud environments • Familiarity with digital forensics, memory or disk analysis, malware analysis, and evidence preservation practices • Experience creating detection rules, threat hunting queries, security automation, or orchestration workflows • Experience supporting manufacturing, industrial, critical infrastructure, or operational technology environments • Experience coordinating investigations with managed security service providers, legal teams, human resources, or law enforcement • Participation in an on-call rotation or work outside normal business hours may be required

🏖️ Benefits

• Health insurance • Life insurance • Short-term disability • Long-term disability • Paid time off • Retirement plan • Flexible working arrangements where possible and mutually agreed

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume