Cybersecurity Incident Response, Threat Detection Analyst

Job not on LinkedIn

🔥 4 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

QuesTek Europe AB

WebsiteLinkedInAll Job Openings

1 - 10 employees

💼 Consulting

🎖️ Defense

🚀 Aerospace

Consulting • Defense • Aerospace

QuesTek Europe AB is a company that focuses on accelerating the development of materials through its innovative Materials by Design™ approach. This method enables significant reductions in material development time and cost by eliminating trial-and-error processes. The company collaborates with leading organizations in sectors such as aerospace, defense, and manufacturing to enhance material performance and reliability. QuesTek's expertise includes designing advanced materials for high-temperature applications and additive manufacturing technologies, making it a vital partner in the industrialization of new material solutions.

📋 Description

• Participate in 24x7x365 monitoring of SIEM platforms and other cybersecurity monitoring tools • Detect, investigate, and respond to cybersecurity threats within the enterprise network environment • Perform cybersecurity actions to protect, monitor, detect, analyze, and respond to unauthorized or potentially malicious activity • Employ cybersecurity capabilities and deliberate response actions to address security alerts, incidents, and emerging threats • Review and analyze logged security events to identify trends, patterns, and indicators of potential attack, compromise, or malicious activity • Monitor network logs and traffic to identify indicators of Advanced Persistent Threats (APTs), “low and slow” attacks, and other sophisticated attack techniques • Maintain awareness of current and emerging cyber threats using intelligence resources, including Open Source Intelligence (OSINT) • Perform technical analysis, troubleshooting, and sustainment support for enterprise cybersecurity tools, technologies, and applications • Support implementation and maintenance of Defense-in-Depth strategies, including cybersecurity signatures, detection capabilities, and perimeter defense controls • Evolve responsibilities over time to support team and organizational goals within the overall scope of the role

🎯 Requirements

• Bachelor’s degree (BS or BA) in a technical discipline from an accredited university • Five (5) years of relevant cybersecurity experience supporting security operations, threat detection, incident response, or related cybersecurity functions • Two (2) years of experience conducting root cause analysis of cybersecurity events and incidents, including identifying contributing factors, attack vectors, and remediation opportunities • Demonstrated experience using at least two types of cybersecurity tools or technologies, such as firewalls, intrusion detection/prevention systems (IDS/IPS), host-based antivirus/endpoint protection, data loss prevention (DLP), vulnerability management, digital forensics, malware analysis, or device hardening solutions • Working knowledge of Defense-in-Depth principles and their application to cybersecurity architecture, threat prevention, detection, and response • Experience developing scripts, tools, or automation to enhance threat detection and incident response capabilities, preferably using SPL, Python, and/or PowerShell • Must possess an active IT-I (Critical-Sensitive) security designation or Tier 5 (T5) investigation at the time of proposal submission • Must possess an active DoD Top Secret security clearance • Must be eligible for IT-I designation • Must be eligible for access to Sensitive Compartmented Information (SCI)

🏖️ Benefits

• Paid time off and Holidays • Medical, Dental, and Vision Insurance • Paid Parental Leave • Short-term disability, long-term disability, and life insurance - Employer Paid! • 401(k) • Additional Voluntary Life Insurance • Tuition Reimbursement • Reasonable accommodations throughout the hiring process for individuals with disabilities • Veteran’s preference where permitted by law