Cyber Defense Response Analyst II
Core
Mid-level technical role focused on responding to and remediating cyber incidents, conducting threat hunts, and automating security tools in a multi-cloud environment.
Role type
mid-level IC cyber defense response analyst (DFIR)
Builds
automated security tools and incident response solutions for CME Group's global financial markets
Domain
Financial Services / Cybersecurity
Deliverable
production ML models
Required skills
Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, Python, REST APIs, SIEM/Data Analysis, Cloud Platforms (AWS/GCP/Azure), Forensics Tools (EnCase, FTK, etc.)
Preferred skills
GCIH, GCFE, GCFA, OSCP, Sec+ certifications
Technologies
Q Radar, Sentinel, Splunk, Chronicle, ArcSight, KAPE, Cellebrite, Ghidra, Ida Pro, Pandas
Responsibilities
Drive full incident response lifecycle from triage to remediation; conduct regular threat hunts to identify anomalies; build/integrate security tools using AI and Python; lead tabletop exercises; maintain internal incident response runbooks and playbooks
Seniority
Mid-level, hands-on IC
