Cyber Defense Analyst II

CME Group

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Chicago, IL
Salary
$93,900–$156,500 / yr
Employment
Full-time
Posted
6 days ago
Freshness
Confirmed live today
Nearby
99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $140k
This role $125k
$85k $180k
below market most similar roles pay here above market

This role pays less than 60% of similar roles. Most pay $116,969–$162,125 — the blue band above. At the midpoint, this role pays about $125k versus about $140k for comparable roles.

Based on 240 similar postings.

Employer

About CME Group

CME Group operates the world''s largest financial derivatives marketplace, offering futures and options products across interest rates, equity indexes, foreign exchange, energy, agricultural products, and metals. Industry: Financial Exchanges & Derivatives

CME Group currently has 9 open roles on FindRole.

Listed pay typically runs $120,088–$196,300 across 8 roles with salary data.

Most-posted roles

View all roles at CME Group

At a glance

TL;DR · Cyber Defense Analyst II

Role Posting Log in to save

The Cyber Defense Analyst II joins the Security Operations Center to monitor, detect, and validate security threats across network, host, identity, and cloud telemetry. This role bridges traditional cyber defense monitoring with modern engineering practices by performing telemetry analysis, triaging security events, and identifying process bottlenecks. You will develop automation scripts, SOAR playbooks, and SIEM detection rules to eliminate manual toil and support AI-augmented triage workflows. Key technical requirements include proficiency in Python, Rust, or Java for API interaction and data processing, along with knowledge of network protocols, operating system internals, and the MITRE ATT&CK framework. You will utilize tools like Git, Cortex XSOAR, and Splunk SOAR within GCP or AWS environments to operationalize threat intelligence and maintain detailed documentation within the Knowledge Management System.

Skills

Python Rust Java GCP AWS SOAR Cortex XSOAR Splunk SOAR Torq Tines Git CI/CD Detection-as-Code SIEM JSON XML MITRE ATT&CK Linux Windows macOS LLMs

What you'll do

  • Analyze, triage, and validate security events across network, host, identity, and cloud telemetry.
  • Provide well-documented and enriched security alerts for handoffs to the Incident Response team.
  • Identify repetitive monitoring tasks and develop scripts or SOAR playbooks to automate them.
  • Develop, test, and deploy SIEM detection rules using version control and Detection-as-Code practices.
  • Provide operational feedback on AI-assisted workflows and agentic triage outputs to engineering teams.
  • Participate in hypothesis-driven threat hunts and operationalize threat intelligence into automated detections.
  • Maintain detailed documentation of monitoring processes, playbook logic, and detection schemas.

What we're looking for

  • 1–3 years of experience in a Level 1 SOC environment or related Information Security role.
  • Proficient in Python, Rust, Java, or a related programming language for automation, APIs, or data processing.
  • Working knowledge of network protocols, operating system internals (Windows/Linux/macOS), and MITRE ATT&CK framework.
  • Hands-on experience using modern SOAR platforms for alert enrichment and response.
  • Familiarity with cloud environments (preferably GCP or AWS) and cloud-specific telemetry.
  • Interest in modern engineering practices, including version control (Git) and basic CI/CD workflows.
  • BA/BS in Computer Science, Information Security, Engineering, or a related field with appropriate experience.
  • Relevant industry certifications such as CompTIA CySA+, SANS GSEC, GCIA, or foundational automation/cloud certs (preferred).

Related searches

More Cyber Defense Analyst II jobs Cyber Defense Analyst II jobs in Chicago All jobs at CME Group

More like this

Similar roles

Cyber Defense Analyst

Leidos

Suitland, MD 11 days ago $87,100–$157,450
SIEM Splunk Elastic NIDPS Cisco FirePower Palo Alto NGFW Trellix ePO Microsoft Defender Tanium Python PowerShell Ruby Perl JavaScript C C++ Java Kali Nmap Burp Suite sqlmap Metasploit Threat Hunting Penetration Testing
4+ yrs exp
Save

Cyber Threat Detection & Response Analyst

McKesson Corporation

Richmond, VA 29 days ago $98,900–$164,900
SIEM EDR XDR SOAR Python PowerShell Bash KQL SPL AWS Azure GCP MITRE ATT&CK IDS/IPS Firewalls Windows Linux NIST CIS Benchmarks
4+ yrs exp
Save

Cyber Analyst

Leidos

Lawton, OK 81 days ago $87,100–$157,450
SOC Threat Intelligence Detection Engineering Forensics Linux Wireshark Network Analysis MITRE ATT&CK Agile Scrum Memory Forensics Telemetry SIGINT Cryptographic Key Management
4+ yrs exp
Save

Computer Network Defense Analyst

Leidos

Arlington, VA 35 days ago $69,550–$125,725
Network Defense SIEM Splunk Elastic AWS Azure IDS/IPS Firewalls Windows Red Hat Incident Response Network Log Analysis DISA Security+ CE Disaster Recovery Business Continuity
2+ yrs exp
Save

Cyber Security Analyst

Leidos

Adelphi, MD 63 days ago $87,100–$157,450
Incident Response SIEM IDS AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management SOC Security+ CSSP-Infrastructure Support
4+ yrs exp Hybrid
Save

Cyber Security Analyst

Leidos

Adelphi, MD 63 days ago $87,100–$157,450
SIEM IDS Incident Response AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management Security+ CE CSSP-Infrastructure Support SaaS SOC Defense-in-Depth
4+ yrs exp Hybrid
Save