Cyber Defense Response Analyst II

Primary Responsibilities Digital Forensics and Incident Response: drive the full incident response lifecycle from initial triage to remediation, applying specialty skills such as endpoint forensics and malware analysis; operate in a multi‑cloud environment. Threat Hunting: conduct regular hunts to identify misconfigurations, detection gaps, and other anomalies. Automation & Engineering: build or integrate security tools using AI, Python, and REST APIs; collaborate with automation engineers to develop advanced solutions. Tabletop Exercises (TTX): lead exercises to improve team readiness. Technical Documentation: contribute continuously to internal knowledge bases of incident response runbooks and playbooks, ensuring they are exhaustive, accurate, and up‑to‑date. Ideal Candidate Attributes Innate curiosity with a record of self‑teaching advanced technical concepts. Highly innovative problem‑solving with unorthodox approaches. Research‑oriented mindset: passion for collecting facts, debating details, and digging into complex problems. Effective high‑pressure communication: translate technical research into clear, actionable intelligence for leadership across all levels. Strong academic record with demonstrated innovation in information security. Highly detail‑oriented: keen eye for anomalous log entries. Preferred Technical Qualifications DFIR Background: 2‑4 years of practical experience with Digital Forensics, Incident Handling, and/or Malware Analysis using tools such as KAPE, EnCase, Cellebrite, FTK, Magnet Axiom, and Autopsy; proficient with malware analysis tools including Ghidra, IdaPro, PEStudio, and x64dbg. SIEM/Data Analysis: 2‑4 years of experience with QRadar, Sentinel, Splunk, Chronicle, ArcSight, or similar log management technologies. Strong IT fundamentals: comprehensive understanding of computer networking, operating systems, and their intersection with Cybersecurity. Programming Skills: Python development for data manipulation (Pandas) and interacting with security tool APIs. Cloud Experience: practical experience with AWS, GCP, or Azure. Education & Certifications: BA/BS in Engineering, Computer Science, or Information Security (or a non‑tech degree with appropriate experience and/or certifications); desired certifications include GCIH, GCFE, GCFA, OSCP, Sec+, and similar cyber‑oriented credentials. Salary & Benefits Salary Range: $103,200 - $172,000. Compensation includes a competitive base salary, an annual target bonus opportunity, and the option to participate in CME Group’s broad‑based equity program. Benefits include comprehensive health coverage, a 401(k) with an active pension plan, highly competitive education reimbursement provisions, paid time off, a mental health benefit, and additional flexibility and choice across the benefits program. Equal‑Opportunity Employer As an equal‑opportunity employer, CME Group considers all potential employees without regard to any protected characteristic. Employment Eligibility Verification CME Group uses E‑Verify to verify employment eligibility as required by U.S. regulations. #J-18808-Ljbffr CME Chicago Mercantile Exchange Inc.