{"id":1951138,"url":"https://alion.io/job/connected-logistics-cybersecurity-incident-response-threat-detection-analyst","title":"Cybersecurity Incident Response & Threat Detection Analyst","company":{"id":5915,"name":"Connected Logistics","domain":"logc2.com","url":"https://alion.io/company/connected-logistics","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Columbus, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":110000,"currency":"USD","period":"year","gross":null,"usd_annual":110000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Defense in Depth","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-05T14:10:41Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-24T08:14:01Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Description\nContingent Contract Award- Potential Start Date November 30, 2026\nBring your cybersecurity expertise to a mission that matters. Connected Logistics is seeking an experienced Cybersecurity Incident Response & Threat Detection Analyst to support the Defense Logistics Agency (DLA) in protecting critical enterprise systems and networks from evolving cyber threats.\nAs part of a 24x7x365 cybersecurity mission, you will monitor and analyze security events, investigate potential incidents, identify indicators of compromise, and respond to sophisticated threats, including Advanced Persistent Threats and \"low and slow\" attack activity. You will work across SIEM and other cybersecurity technologies, leverage threat intelligence and OSINT, conduct root cause analysis, and help strengthen enterprise defense-in-depth capabilities. This opportunity is ideal for a cleared cybersecurity professional who thrives in a mission-focused environment where threat detection, technical analysis, and rapid response directly contribute to protecting critical defense operations.\nKey Responsiblities\nMonitor SIEM platforms and other cybersecurity monitoring tools within a 24x7x365 operational environment to identify potential security threats, suspicious activity, and indicators of compromise.\nDetect, analyze, investigate, and respond to cybersecurity events and incidents affecting the enterprise network environment.\nPerform root cause analysis of cybersecurity events and incidents to identify the source, impact, and contributing factors.\nReview and analyze security logs, alerts, and network traffic to identify trends and activity indicative of an attack or compromise.\nProactively monitor for Advanced Persistent Threats (APTs), \"low and slow\" attacks, and other sophisticated or emerging cyber threats.\nExecute appropriate incident response actions to help contain, mitigate, and respond to unauthorized or malicious activity within the environment.\nLeverage cybersecurity intelligence resources, including Open Source Intelligence (OSINT), to maintain awareness of current and emerging threats.\nAnalyze information from multiple security technologies, including firewalls, IDS/IPS, host-based antivirus, data loss prevention, vulnerability management, digital forensics, malware analysis, and device hardening tools.\nProvide technical analysis and sustainment support for enterprise cybersecurity tools and applications.\nAssist with the implementation and application of Defense-in-Depth security controls, signatures, and perimeter defenses designed to reduce network threats.\nDevelop and maintain scripts, tools, and automation that enhance threat detection and incident response capabilities, using technologies such as SPL, Python, and PowerShell.\nDocument cybersecurity events, investigative findings, analysis, and response activities in accordance with applicable operational requirements.\nMaintain required CSSP Analyst certification and remain current on cybersecurity threats, attack techniques, and defensive practices.\nRequirements\nMust possess a DOD TOP SECRET Clearance and be eligible for an IT-1 and be eligible for SCI access.\n Must have an active CSSP Analyst certification (ex, CEH, CySA) and provide proof of certification.\nFive (5) years relevant experience.\nTwo (2) years performing root cause analysis of cybersecurity events and incidents.\nWorking knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus,\nData loss prevention, Vulnerability Management, Forensics, Malware Analysis, and Device Hardening.\nUnderstanding of Defense-in-Depth.\nAbility to build scripts and tools to enhance threat detection and incident response capabilities; (Preferably in SPL, Python, PowerShell)\nTotal Rewards Statement\nWe believe in fairness and clarity throughout our hiring process. The anticipated salary range for this position\nis $100,000.00 to $110,000.00 USD. This is a good-faith range based on factors such as your experience, geographic location, and any applicable contractual requirements, and may vary slightly.\nBeyond salary, we provide a robust benefits package and encourage ongoing professional development, because your growth and well-being matter to us. We’re excited to support you in building a rewarding career with us!\nConnected Logistics respects the need for confidentiality for all applicants.\nConnected Logistics has been named a 2026 WTOP Top Workplace in the medium sized business category. Our mission is clear: we deliver mission-focused IT, cybersecurity, logistics, and enterprise modernization support to federal agencies. When we invest in our people and create an environment where they feel valued and empowered, we deliver stronger outcomes for our clients and the missions we support\nConnected Logistics offers an excellent benefits package that includes health, dental, vision, life, and disability insurance, a great 401(k) package, and generous Paid Time Off.\nEOE/Disability/Veterans","description_format":"text","description_chars":4980,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-06T10:05:43Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.733,"p_room":0.35,"age_days":18,"expected_fill_days":8,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":110000,"is_top_pay":false},"html_url":"https://alion.io/job/connected-logistics-cybersecurity-incident-response-threat-detection-analyst","json_url":"https://alion.io/job/connected-logistics-cybersecurity-incident-response-threat-detection-analyst.json","meta":{"generated_at":"2026-10-24T16:46:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24306,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5915},"rest":"https://alion.io/mcp/rest/get_company?id=5915"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fconnected-logistics-cybersecurity-incident-response-threat-detection-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fconnected-logistics-cybersecurity-incident-response-threat-detection-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fconnected-logistics-cybersecurity-incident-response-threat-detection-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/connected-logistics-cybersecurity-incident-response-threat-detection-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fconnected-logistics-cybersecurity-incident-response-threat-detection-analyst"}]}