Detection & Monitoring Analyst

Floridafull timeRemote

Apply on Employer Site

mid

H1B: no

Ardentmc Detection & Monitoring Analyst at Ardentmc responsible for validating security telemetry and detection processes across multiple agency environments. Monitors SIEM, EDR/XDR, network, identity, and ticketing systems to ensure accurate alerting and incident handling.

Responsibilities

Monitor approved testing activity across SIEM, EDR/XDR, identity, endpoint, network, cloud, and ticketing systems.
Validate whether expected signals are generated, correlated, enriched, prioritized, and represented accurately in alerts.
Trace analyst triage, escalation, communications, and handling timelines against OCIG-approved criteria and documented agency expectations.
Perform alert investigation, packet and network traffic analysis, log correlation, IOC review, malware or phishing analysis when in approved scope, and event-timeline reconstruction.
Develop or recommend detection logic improvements, use cases, correlation rules, dashboards, and tuning actions while clearly separating recommendations from factual test results.
Preserve screenshots, alerts, queries, logs, timestamps, ticket records, analyst actions, and annotations in controlled evidence packages.
Identify telemetry gaps, blind spots, false negatives, inaccurate severity, weak correlation, and broken escalation paths.
Support vulnerability, remediation, and incident-specific reviews requested through OCIG.
Help deliver knowledge-transfer sessions on detection validation and evidence interpretation.

Qualification

Bachelor’s degree in cybersecurity4 years of hands-on SOCSIEM content developmentExperience with cloud-native loggingArdent is an equal opportunity employer

Required

Bachelor’s degree in cybersecurity, information assurance, computer science, or related field, or equivalent SOC experience.
Proof of relevant professional certifications such as CISSP, CISA, PMP, CEH, or other relevant certifications.
4 years of hands-on SOC, detection engineering, intrusion analysis, continuous monitoring, incident response, network security, or threat-hunting experience.
Experience with SIEM and EDR/XDR platforms, log query languages, network telemetry, MITRE ATT&CK mapping, case management, and incident escalation.
Ability to document expected versus observed results precisely and maintain evidence integrity.
Knowledge of NIST CSF Detect outcomes and access-control telemetry.

Preferred

SIEM content development, detection-as-code, or security analytics experience.
Experience with cloud-native logging, identity telemetry, SOAR, packet capture, threat intelligence, and forensic investigation.
Zero Trust monitoring or FedRAMP continuous-monitoring experience.
Government SOC or regulated-sector experience.
Due to the nature of the work we support, all candidates in consideration for this role must be willing to undergo the government issued background investigation process.
Ardent is an equal opportunity employer. We will not discriminate in employment, recruitment, advertisements for employment, compensation, termination, upgrading, promotions, and other conditions of employment against any employee or job applicant on the bases of race, color, gender, national origin, age, religion, creed, disability, veteran's status, sexual orientation, gender identity, gender expression, or any other basis protected by state, local, or federal law.

Company

Ardentmc

View company page

Source: greenhouse

Active within the past hour

Remote-friendly

More roles at Ardentmc

Governance, Risk, and Compliance (GRC) / Compliance Analyst

Florida

Adversarial Simulation Lead

Florida

Program Manager (PMP Required)

Florida

Cyber Lead Auditor / Test Lead

Florida

Boost Your Interview Chances

Improve Resume Match Score

Free

Your Score

9.0

Strong Applicant

Must-Have Skills for This Role

SIEMEDR/XDRlog query languagesMITRE ATT&CKpacket capturemalware analysis

Optimize my Resume

Apply Faster with Autofill

Free

Save your profile once. LumiJobs pre-fills the employer's application form so you stop re-typing the same answers on every site.

Apply With Autofill

Or skip LumiJobs's tools and submit directly on the employer's career site.

Apply on Employer Site