{"id":3356536,"url":"https://alion.io/job/intercontinental-exchange-analyst-cybersecurity-dfir","title":"Analyst, Cybersecurity DFIR","company":{"id":58612,"name":"Intercontinental Exchange","domain":"ice.com","url":"https://alion.io/company/intercontinental-exchange","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jibe","truth_index":{"grade":"B","score":76,"open_postings":35,"ghost_share":0,"stale_share":0.971,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Provo, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":69000,"max_usd":142000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":344},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-27T19:56:00Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-01T08:37:17Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an evolving arsenal of controls that require technical proficiency as well as tenacity, professionalism, and strong communication skills.\nResponsibilities\nSecurity Analytics - Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection\nIncident Management - Detect, document, investigate, and resolve security incidents in an efficient manner\nEndpoint Forensics - Construct meaningful incident timelines from forensic artifact analysis\nCounter Measures - Ability to design and implement preventative and corrective controls to counteract emerging threats\nProactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls\nBehavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity\nIntrusion Detection - Develop and tune network anomaly control capability to produce reliable actionable data\nPreferred Knowledge and Experience\nUnderstanding of networking and its application\nUniversity degree in related discipline or minimum one year in an Information Security Role\nHands on experience with Windows and Linux\nCore Competencies\nTeamwork: works well with teammates locally and at remote offices; shares knowledge and is seen as someone to go to for help; contributes in weekly peer meetings\nProblem solving and decision making: demonstrates a sense of urgency; takes ownership of problems and follows temporary fixes with permanent solution; finds creative solutions\nCommunication: is clear and accurate in verbal and written communication; listens to peers and supported employees; follows directions and provides useful feedback\nProfessionalism: makes a positive impression in person, via phone, and electronically; models a ‘can-do’ attitude; embraces additional responsibility; refrains from office gossip or conflict; works extra hours as needed to ensure work is complete; adheres to corporate policy and encourages others to do the same\n Intercontinental Exchange, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to legally protected characteristics.","description_format":"text","description_chars":2391,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Financial Services","Stock Exchanges & Market Infrastructure"],"lifecycle":[{"event":"open","at":"2026-10-27T20:06:09Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 148 · green card filings: 34","filings_12m":148,"filings_prev_12m":268,"green_card_filings_12m":34,"median_offered_wage_usd":116236,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":8}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":4,"expected_fill_days":28,"reasons":["conf:0","stale_co","velocity","win:early","comp:junior,brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/intercontinental-exchange-analyst-cybersecurity-dfir","json_url":"https://alion.io/job/intercontinental-exchange-analyst-cybersecurity-dfir.json","meta":{"generated_at":"2026-11-01T09:12:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14279,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58612},"rest":"https://alion.io/mcp/rest/get_company?id=58612"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fintercontinental-exchange-analyst-cybersecurity-dfir"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fintercontinental-exchange-analyst-cybersecurity-dfir"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fintercontinental-exchange-analyst-cybersecurity-dfir"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/intercontinental-exchange-analyst-cybersecurity-dfir\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fintercontinental-exchange-analyst-cybersecurity-dfir"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3356536}},{"tool":"search_jobs","arguments":{"company":"ice.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3356536},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}