Cybersecurity Incident Response & Threat Detection Analyst

OCH Technologies is actively looking for a Cybersecurity Incident Response & Threat Detection Analyst supporting a Defense Logistics Agency program.

This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements.

Location

Remote

Core Responsibilities & Duties

• Participates in 24x7x365 monitoring of Security Information and Event Management (SIEM) platforms and other cybersecurity monitoring tools to detect, investigate, and respond to cybersecurity threats within the enterprise network environment.
• Performs cybersecurity actions to protect, monitor, detect, analyze, and respond to unauthorized or potentially malicious activity across the enterprise environment.
• Employs cybersecurity capabilities and deliberate response actions to address specific security alerts, incidents, and emerging threats.
• Reviews and analyzes logged security events to identify trends, patterns, and indicators of potential attack, compromise, or malicious activity within the environment.
• Actively monitors network logs and traffic to identify indicators of Advanced Persistent Threats (APTs), "low and slow" attacks, and other sophisticated attack techniques.
• Maintains awareness of current and emerging cyber threats through the use of intelligence resources, including Open Source Intelligence (OSINT).
• Performs technical analysis, troubleshooting, and sustainment support for enterprise cybersecurity tools, technologies, and applications.
• Supports the implementation and maintenance of Defense-in-Depth strategies, including cybersecurity signatures, detection capabilities, and perimeter defense controls designed to mitigate and reduce network threats.

Responsibilities may evolve over time to support team and organizational goals, but will remain consistent with the overall scope of the role.