Detection & Monitoring Analyst

Ardent

. Monitor approved testing activity across SIEM, EDR/XDR, identity, endpoint, network, cloud, and ticketing systems .

Posted 9/17/2026full-timeRemote • Florida • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in monitoring and validating security alerts across various systems, including SIEM and EDR/XDR platforms. Proficient in incident response, threat hunting, and maintaining evidence integrity while adhering to NIST CSF standards.

Highest-signal resume keywords

SIEM ExperienceEDR/XDR PlatformsIncident ResponseDetection EngineeringCybersecurity Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Log CorrelationNetwork Traffic AnalysisMalware AnalysisPacket AnalysisDetection Logic DevelopmentMITRE ATT&CK MappingVulnerability AssessmentIncident EscalationEvidence PreservationContinuous Monitoring

Soft Skills

CommunicationKnowledge TransferDocumentation

Tools & Technologies

Ticketing SystemsCloud Security ToolsNetwork Security ToolsCase Management Systems

Certifications & Qualifications

CISSPCISAPMPCEH

Industry Keywords

SOC ExperienceThreat HuntingNIST CSFAccess-Control Telemetry

Tech Stack

Tools & technologies

CloudCyber SecurityPMP

About the role

Key responsibilities & impact

Monitor approved testing activity across SIEM, EDR/XDR, identity, endpoint, network, cloud, and ticketing systems
Validate whether expected signals are generated, correlated, enriched, prioritized, and accurately represented in alerts
Trace analyst triage, escalation, communications, and handling timelines against approved criteria and agency expectations
Perform alert investigation, packet and network traffic analysis, log correlation, IOC review, malware or phishing analysis when in approved scope, and event-timeline reconstruction
Develop or recommend detection logic improvements, use cases, correlation rules, dashboards, and tuning actions
Preserve screenshots, alerts, queries, logs, timestamps, ticket records, analyst actions, and annotations in controlled evidence packages
Identify telemetry gaps, blind spots, false negatives, inaccurate severity, weak correlation, and broken escalation paths
Support vulnerability, remediation, and incident-specific reviews requested through OCIG
Help deliver knowledge-transfer sessions on detection validation and evidence interpretation

Requirements

What you’ll need

Bachelor’s degree in cybersecurity, information assurance, computer science, or related field, or equivalent SOC experience
Proof of relevant professional certifications such as CISSP, CISA, PMP, CEH, or other relevant certifications
4 years of hands-on SOC, detection engineering, intrusion analysis, continuous monitoring, incident response, network security, or threat-hunting experience
Experience with SIEM and EDR/XDR platforms, log query languages, network telemetry, MITRE ATT&CK mapping, case management, and incident escalation
Ability to document expected versus observed results precisely and maintain evidence integrity
Knowledge of NIST CSF Detect outcomes and access-control telemetry
Willingness to undergo the government-issued background investigation process

Benefits

Comp & perks

Expected travel to Tallahassee, FL
Equal opportunity employment protections
Opportunity to participate in knowledge-transfer sessions on detection validation and evidence interpretation