Cybersecurity Incident Response & Threat Detection Analyst
- Salary
- $110,000
- Level
- Mid
- Work type
- Not stated
- Visa
- Not stated
Open. First seen 3 October 2026.
The team: Programs HIRES STEADILY
This role is one of 52 open in Programs. 10 were posted in the last 30 days and the oldest in May: a team that hires all year rather than one being built.
WHAT THE TEAM WORKS WITH, ACROSS ITS POSTINGS
Cybersecurity (26 of 52), Cisco (19 of 52), Azure (14 of 52), AWS (10 of 52), IAM (9 of 52), Networking (8 of 52), Ansible (5 of 52)
OTHER ROLES ON THIS TEAM
- Middle-Tier Database Developer posted Oct 2
- Cybersecurity Engineer Jr. (Connection Approval Support) posted Oct 2
- Automation Engineer posted Sep 30
- SIEM Content Developer posted Sep 29
- Operational Technology Threat Intelligence Analyst posted Sep 29
- Security Control Assessor Representative (SCA-R) posted Sep 29
- Security Control Assessor Representative (SCA-R) posted Sep 28
- Cybersecurity Policy Analyst posted Sep 28
- Cloud SCA-R, Mid posted Sep 23
- Senior Information Systems Security Officer (ISSO) posted Sep 16
- RCDD Telecom Design Engineer posted Sep 10
- Lead Software Technology Engineer (DevSecOps) - Senior posted Sep 2
- AI Security Architect posted Aug 28
- Information System Security Engineer (ISSE) posted Aug 28
- DevSecOps Engineer posted Aug 28
- Cloud Security Architect posted Aug 28
- Solutions Architect posted Aug 27
- Network Engineer posted Aug 26
- Security Control Assessor, Mid posted Aug 10
- Sr. Network/Systems Engineer posted Aug 10
- Senior Network Engineer - Europe posted Jul 30
- Senior Network Engineer - Pacific posted Jul 30
- Senior Network Engineer - CONUS posted Jul 30
- Telecommunications Design Drafter posted Jul 21
- Cloud SCA-R, Senior posted Jul 14
- Field Engineer II posted Jul 7
- Field Engineer III posted Jun 17
- Field Engineer I posted Jun 17
- Senior Data Analyst - Subject Matter Expert (SME) posted May 6
- Systems Engineer posted Apr 24
- Systems Engineer posted Apr 23
- Storage Architect posted Apr 23
- Cloud Storage Engineer posted Apr 23
- Cloud Storage Engineer posted Apr 21
- Audio Visual Engineer posted Mar 9
- Task Order Project Manager (TOPM) posted Feb 27
- Cloud Computing Specialist (CCS), Information Assurance posted Feb 27
- Enterprise Architect posted Feb 27
- Senior Network Engineer - Corporate Enterprise Network (WAN) posted Feb 27
- Telecommunications Network Engineer - Basic posted Feb 19
- Senior Telecommunications Network Engineer posted Feb 19
- Cyber Cloud Assessment Engineer, Sr. posted Feb 17
- Senior Network Infrastructure Operations Manager (RCDD Required) posted Jan 28
- ISP/OSP Task Order Project Manager (Future Opportunity) posted Dec 4
- Sr. SharePoint Architect (Future Opportunity) posted Oct 14
- SharePoint Analyst Lead (Future Opportunity) posted Oct 14
- TASS (Current Contract) - Security Control Assessor, Senior posted Sep 23
- JSP ETM (Future Opportunity) - Voice Network Operations posted Aug 7
- JSP ETM (Future Opportunity) - COOP & Cyber Continuity Analysts posted Aug 7
- JSP ETM (Future Opportunity) - Network Engineering & Rapid Response posted Aug 7
- Senior Registered Communications Distribution Designer (RCDD) (Future Opportunity) posted May 13
From the team and dates on AGE Solutions's own job board.
About the role
About Us
AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.
AGE Solutions is seeking an experienced Cybersecurity Incident Response & Threat Detection Analyst to support continuous monitoring, detection, analysis, and response to cybersecurity threats within the Enterprise Network Environment.
This position participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools, investigates events and activity indicative of attack or compromise, and actively monitors for Advanced Persistent Threats (APTs) and “low and slow” attacks.
The analyst leverages intelligence resources, including Open Source Intelligence (OSINT), provides technical analysis and sustainment support for cybersecurity tools and applications, and assists with Defense-in-Depth signatures and perimeter defense controls.
Responsibilities Include:
- Participate in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment.
- Perform actions to protect, monitor, detect, analyze, and respond to unauthorized activity.
- Employ cybersecurity capabilities and deliberate actions to respond to specific alerts and emerging threats.
- Review logged events and identify trends indicative of attack or compromise within the environment.
- Actively monitor logs and network traffic for Advanced Persistent Threats (APTs) and “low and slow” attacks.
- Maintain awareness of potential threats through intelligence resources, including Open Source Intelligence (OSINT).
- Perform root cause analysis of cybersecurity events and incidents.
- Provide technical analysis and sustainment support for enterprise cybersecurity tools and applications.
- Assist with the application of Defense-in-Depth signatures and perimeter defense controls to diminish network threats.
- Utilize security tools in support of cybersecurity monitoring, detection, analysis, and incident response activities.
- Develop scripts and tools to enhance threat detection and incident response capabilities using SPL, Python, or PowerShell.
- Independently evaluate incident severity, business impact, and alternative containment and remediation approaches; recommend response priorities to customer cybersecurity leadership.
- Use root cause findings to recommend changes to customer incident-response practices and security controls, evaluating security benefits and operational tradeoffs.
Required Skills, Qualifications, and Experience:
- Experience:
- Five (5) years of relevant experience.
- Two (2) years of experience performing root cause analysis of cybersecurity events and incidents.
- Clearance:
- Must possess a current DoD Top Secret Clearance with IT-I, T5 investigation with eligibility for Sensitive Compartmented Information (SCI) access.
- Certifications:
- Must have at least ONE IAT-II Certification from one of the following:
- Cisco Certified Network Associate Security (CCNA Security)
- CompTIA Cybersecurity Analyst (CySA+)
- Global Industrial Cyber Security Professional (GICSP)
- GIAC Security Essentials (GSEC)
- CompTIA Security+ Continuing Education (Security+ CE)
- Systems Security Certified Practitioner (SSCP)
- Must have at least one of the following CSSP Incident Responder certifications:
- Certified Ethical Hacker (CEH)
- CyberSec First Responder (CFR)
- CompTIA Cybersecurity Analyst (CySA+)
- GIAC Certified Forensic Analyst (GCFA)
- GIAC Certified Incident Handler (GCIH)
- Cisco Cybersecurity Specialist (SCYBER)
- Skills and Qualifications:
- Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host-Based Antivirus, Data Loss Prevention, Vulnerability Management, Forensics, Malware Analysis, or Device Hardening.
- Understanding of Defense-in-Depth.
- Ability to build scripts and tools to enhance threat detection and incident response capabilities, preferably using SPL, Python, or PowerShell.
- Location:
- This role is full-time onsite at our customer’s location in Columbus, OH.
Work Environment and Physical Demand:
- Work is primarily performed in a professional office or technical environment.
- Requires participation in 24x7x365 cybersecurity monitoring operations.
- Requires prolonged periods of sitting and working at a computer workstation.
- Requires frequent use of computers, keyboards, monitors, and standard office equipment.
- Requires the ability to maintain concentration and attention to detail while continuously reviewing cybersecurity logs, network traffic, events, and alerts.
- Requires the ability to communicate effectively with team members and stakeholders.
- May require occasional standing, walking, bending, and reaching during the normal course of work.
The projected salary range for this position is $110,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.
At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.
- 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.
- Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.
- 401(k) with Match: We match 3% of your contributions with immediate vesting.
- Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.
- Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
- Parental Leave: 15 days of fully paid leave for new parents, because family matters.
- Military Differential Pay: We bridge the gap for employees on active duty, so they don’t take a financial hit while serving.
- Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
- Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create.
At AGE, you’ll do work that matters, supported by a company that delivers for its people.
Similar jobs
- Security Operations Analyst (SIEM & Threat Detection) at Pragmatike
Shares 5 skills: SIEM, Cisco, PowerShell… - Cybersecurity Engineer at Apollo Information Systems
Shares 5 skills: SIEM, Cisco, PowerShell… · same seniority · same country - Cybersecurity Engineer at INTRACOM DEFENSE
Shares 5 skills: SIEM, Cisco, PowerShell… · same seniority - SOC Analyst (Tier 1, Tier 2 & Tier 3) at Aspenview Technology Partners
Shares 5 skills: SIEM, Cisco, PowerShell… · same seniority - Cybersecurity Engineer at Techconnect.id
Shares 5 skills: SIEM, Cisco, PowerShell… · same seniority - Senior Subcontracts Analyst at AGE Solutions
Also at this company
Is this your posting and you want it taken down? Email info@careerholo.com.