> Markdown version of [/jobs/ext/3034341-cybersecurity-incident-response-threat-detection-analyst](https://www.wearedevelopers.com/jobs/ext/3034341-cybersecurity-incident-response-threat-detection-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Incident Response & Threat Detection Analyst

- **Company:** Anonymous Employer
- **Location:** United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Antivirus Softwares, Cyber Security, Computer Networks, Information Leak Prevention, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Open Source Intelligence, Windows PowerShell, Security Software, Security Information and Event Management, Software Vulnerability Management, Malware, Cyber Threat Analysis, Firewalls (Computer Science)
- **Published:** September 23, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9187297/cybersecurity-incident-response-threat-detection-analyst

## About the Role

* Five (5) years relevant experience

 * Two (2) years performing root cause analysis of cybersecurity events and incidents

 * Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus, Data loss prevention, Vulnerability Management, Forensics, Malware Analysis, Device Hardening

 * Understanding of Defense-in-Depth

 * Ability to build scripts and tools to enhance threat detection and incident response capabilities (Preferably in SPL, Python, PowerShell)

 * Must possess IT-I Critical Sensitive security clearance or Tier 5 (T5)

 * Must possess a DOD TOP SECRET Clearance and be eligible for an IT-1 and be eligible for SCI access

## Description

Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment. Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity. Employs Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats. Reviews logged events for trends that are indicative of attack or compromise within the environment. Actively monitors logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks within the environment. Maintains awareness of possible threats with the use of intelligence resources which include Open Source Intelligence (OSINT). Provides technical analysis and sustainment support for the enterprise for Cybersecurity tools and applications and assists with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Distributed search under the hood](https://www.wearedevelopers.com/videos/256-distributed-search-under-the-hood)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)