Cybersecurity Incident Response & Threat Detection Analyst

AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.

AGE Solutions is seeking an experienced Cybersecurity Incident Response & Threat Detection Analyst to support continuous monitoring, detection, analysis, and response to cybersecurity threats within the Enterprise Network Environment.

This position participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools, investigates events and activity indicative of attack or compromise, and actively monitors for Advanced Persistent Threats (APTs) and “low and slow” attacks.

The analyst leverages intelligence resources, including Open Source Intelligence (OSINT), provides technical analysis and sustainment support for cybersecurity tools and applications, and assists with Defense-in-Depth signatures and perimeter defense controls.

Responsibilities Include:

• Participate in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment.
• Perform actions to protect, monitor, detect, analyze, and respond to unauthorized activity.
• Employ cybersecurity capabilities and deliberate actions to respond to specific alerts and emerging threats.
• Review logged events and identify trends indicative of attack or compromise within the environment.
• Actively monitor logs and network traffic for Advanced Persistent Threats (APTs) and “low and slow” attacks.
• Maintain awareness of potential threats through intelligence resources, including Open Source Intelligence (OSINT).
• Perform root cause analysis of cybersecurity events and incidents.
• Provide technical analysis and sustainment support for enterprise cybersecurity tools and applications.
• Assist with the application of Defense-in-Depth signatures and perimeter defense controls to diminish network threats.
• Utilize security tools in support of cybersecurity monitoring, detection, analysis, and incident response activities.
• Develop scripts and tools to enhance threat detection and incident response capabilities using SPL, Python, or Power Shell.
• Independently evaluate incident severity, business impact, and alternative containment and remediation approaches; recommend response priorities to customer cybersecurity leadership.
• Use root cause findings to recommend changes to customer incident-response practices and security controls, evaluating security benefits and operational tradeoffs.

Required Skills, Qualifications, and

Experience:

• Experience:
  • Five (5) years of relevant experience.
  • Two (2) years of experience performing root cause analysis of cybersecurity events and incidents.
• Clearance:
  • Must possess a current DoD Top Secret Clearance with IT-I, T5 investigation with eligibility for Sensitive Compartmented Information (SCI) access.
• Certifications:
  • Must have at least ONE IAT-II Certification from one of the following:
    • Cisco Certified Network Associate Security (CCNA Security)
    • CompTIA Cybersecurity Analyst (CySA+)
    • Global Industrial Cyber Security Professional (GICSP)
    • GIAC Security Essentials (GSEC)
    • CompTIA Security+ Continuing Education (Security+ CE)
    • Systems Security Certified Practitioner (SSCP)
  • Must have at least one of the following CSSP Incident Responder certifications:
    • Certified Ethical Hacker (CEH)
    • Cyber Sec First Responder (CFR)
    • CompTIA Cybersecurity Analyst (CySA+)
    • GIAC Certified Forensic Analyst (GCFA)
    • GIAC Certified Incident Handler (GCIH)
    • Cisco Cybersecurity Specialist (SCYBER)
• Skills and
  
  Qualifications:
  
  
  • Wo…