{"id":1487786,"url":"https://alion.io/job/age-solutions-cybersecurity-incident-response-threat-detection-analyst","title":"Cybersecurity Incident Response & Threat Detection Analyst","company":{"id":668785,"name":"AGE Solutions","domain":"age.solutions","url":"https://alion.io/company/age-3","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":28,"ghost_share":0,"stale_share":0.429,"repost_share":0,"time_to_fill_p50_days":53,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Columbus, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":110000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Defense in Depth","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"closed","first_seen_at":"2026-09-29T20:25:21Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-21T14:07:42Z","board_verified":false,"closed_at":"2026-10-21T14:07:42Z","days_open":21,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":21},"description":"About Us\nAGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.\nAGE Solutions is seeking an experienced Cybersecurity Incident Response & Threat Detection Analyst to support continuous monitoring, detection, analysis, and response to cybersecurity threats within the Enterprise Network Environment.\nThis position participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools, investigates events and activity indicative of attack or compromise, and actively monitors for Advanced Persistent Threats (APTs) and “low and slow” attacks.\nThe analyst leverages intelligence resources, including Open Source Intelligence (OSINT), provides technical analysis and sustainment support for cybersecurity tools and applications, and assists with Defense-in-Depth signatures and perimeter defense controls.\nResponsibilities Include:\nParticipate in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment.\nPerform actions to protect, monitor, detect, analyze, and respond to unauthorized activity.\nEmploy cybersecurity capabilities and deliberate actions to respond to specific alerts and emerging threats.\nReview logged events and identify trends indicative of attack or compromise within the environment.\nActively monitor logs and network traffic for Advanced Persistent Threats (APTs) and “low and slow” attacks.\nMaintain awareness of potential threats through intelligence resources, including Open Source Intelligence (OSINT).\nPerform root cause analysis of cybersecurity events and incidents.\nProvide technical analysis and sustainment support for enterprise cybersecurity tools and applications.\nAssist with the application of Defense-in-Depth signatures and perimeter defense controls to diminish network threats.\nUtilize security tools in support of cybersecurity monitoring, detection, analysis, and incident response activities.\nDevelop scripts and tools to enhance threat detection and incident response capabilities using SPL, Python, or PowerShell.\nIndependently evaluate incident severity, business impact, and alternative containment and remediation approaches; recommend response priorities to customer cybersecurity leadership.\nUse root cause findings to recommend changes to customer incident-response practices and security controls, evaluating security benefits and operational tradeoffs.\nRequired Skills, Qualifications, and Experience:\n Experience:Five (5) years of relevant experience.\nTwo (2) years of experience performing root cause analysis of cybersecurity events and incidents.\n\n Clearance:Must possess a current DoD Top Secret Clearance with IT-I, T5 investigation with eligibility for Sensitive Compartmented Information (SCI) access.\n\n Certifications:Must have at least ONE IAT-II Certification from one of the following:Cisco Certified Network Associate Security (CCNA Security)\nCompTIA Cybersecurity Analyst (CySA+)\nGlobal Industrial Cyber Security Professional (GICSP)\nGIAC Security Essentials (GSEC)\nCompTIA Security+ Continuing Education (Security+ CE)\nSystems Security Certified Practitioner (SSCP)\n\nMust have at least one of the following CSSP Incident Responder certifications:Certified Ethical Hacker (CEH)\nCyberSec First Responder (CFR)\nCompTIA Cybersecurity Analyst (CySA+)\nGIAC Certified Forensic Analyst (GCFA)\nGIAC Certified Incident Handler (GCIH)\nCisco Cybersecurity Specialist (SCYBER)\n\nSkills and Qualifications:Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host-Based Antivirus, Data Loss Prevention, Vulnerability Management, Forensics, Malware Analysis, or Device Hardening.\nUnderstanding of Defense-in-Depth.\nAbility to build scripts and tools to enhance threat detection and incident response capabilities, preferably using SPL, Python, or PowerShell.\n\nLocation:This role is full-time onsite at our customer’s location in Columbus, OH.\n\nWork Environment and Physical Demand:\nWork is primarily performed in a professional office or technical environment.\nRequires participation in 24x7x365 cybersecurity monitoring operations.\nRequires prolonged periods of sitting and working at a computer workstation.\nRequires frequent use of computers, keyboards, monitors, and standard office equipment.\nRequires the ability to maintain concentration and attention to detail while continuously reviewing cybersecurity logs, network traffic, events, and alerts.\nRequires the ability to communicate effectively with team members and stakeholders.\nMay require occasional standing, walking, bending, and reaching during the normal course of work.\nThe projected salary range for this position is $110,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.\nAt AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.\n26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.\nPerformance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.\n 401(k) with Match: We match 3% of your contributions with immediate vesting.\nFinancial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.\nHealth Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.\nParental Leave: 15 days of fully paid leave for new parents, because family matters.\nMilitary Differential Pay: We bridge the gap for employees on active duty, so they don’t take a financial hit while serving.\nProfessional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.\nShared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create.\nAt AGE, you’ll do work that matters, supported by a company that delivers for its people.","description_format":"text","description_chars":6552,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Life insurance","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-09-29T23:51:18Z"},{"event":"close","at":"2026-10-21T14:07:42Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":110000,"is_top_pay":false},"html_url":"https://alion.io/job/age-solutions-cybersecurity-incident-response-threat-detection-analyst","json_url":"https://alion.io/job/age-solutions-cybersecurity-incident-response-threat-detection-analyst.json","meta":{"generated_at":"2026-10-27T23:54:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16148,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":668785},"rest":"https://alion.io/mcp/rest/get_company?id=668785"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fage-solutions-cybersecurity-incident-response-threat-detection-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fage-solutions-cybersecurity-incident-response-threat-detection-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fage-solutions-cybersecurity-incident-response-threat-detection-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/age-solutions-cybersecurity-incident-response-threat-detection-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fage-solutions-cybersecurity-incident-response-threat-detection-analyst"}]}