This role pays less than
70%
of similar roles. Most pay
$122,422–$177,250
— the shaded band above.
At the midpoint, this role pays about
$125k
versus about
$150k
for comparable roles.
Based on 239 similar postings.
Employer
About CME Group
CME Group operates the world''s largest financial derivatives marketplace, offering futures and options products across interest rates, equity indexes, foreign exchange, energy, agricultural products, and metals. Industry: Financial Exchanges & Derivatives
CME Group currently has
8 open roles
on FindRole.
Listed pay typically runs
$128,950–$214,850
across 8 roles with salary data.
Cyber Defense Response Analyst II
The Cyber Defense Response Analyst II is a mid-level technical role focused on responding to and remediating cyber incidents within the global financial markets domain. You will manage the full incident response lifecycle, including initial triage, endpoint forensics, and malware analysis across multi-cloud environments. Daily responsibilities include conducting regular threat hunts to identify misconfigurations, leading tabletop exercises to improve team readiness, and developing technical documentation for internal runbooks. To succeed, you must utilize tools such as Q Radar, Sentinel, Splunk, Chronicle, ArcSight, KAPE, EnCase, Cellebrite, FTK, Magnet Axiom, and Autopsy, while utilizing Ghidra, Ida Pro, PEStudio, and x64dbg for malware analysis. You will also leverage Python, Pandas, and REST APIs to build automated security tools. Required expertise includes proficiency in AWS, GCP, or Azure environments and a deep understanding of networking and operating systems.
Manage the full incident response lifecycle from initial triage to remediation in multi-cloud environments.
Perform endpoint forensics and malware analysis to investigate security incidents.
Conduct regular threat hunts to identify misconfigurations, detection gaps, and anomalies.
Use Python and REST APIs to build and integrate automated tools for incident response.
Lead tabletop exercises to improve team readiness and response capabilities.
Create and maintain detailed technical documentation for internal knowledge bases and playbooks.
Translate complex technical research into clear, actionable intelligence for leadership.
What we're looking for
2+ years of practical experience with Digital Forensics, Incident Handling, and/or Malware Analysis.
2+ years of experience with Q Radar, Sentinel, Splunk, Chronicle, ArcSight, or similar log management technologies.
2+ years of experience using forensics tools like KAPE, EnCase, Cellebrite, FTK, Magnet Axiom, and Autopsy.
Experience with malware analysis tools such as Ghidra, Ida Pro, PEStudio, and x64dbg.
Strong understanding of computer networking, operating systems, and their intersection with Cybersecurity.
Development experience with Python for data manipulation (Pandas) and interacting with REST APIs.
Practical experience with AWS, GCP, or Azure.
BA/BS in Engineering, Computer Science, or Information Security (non-tech degrees accepted with equivalent experience/certifications); GCIH, GCFE, GCFA, OSCP, Sec+, and similar certifications are desired (preferred).
Digital Forensics
Incident Response
SIEM
EDR
Crowdstrike
Microsoft Defender for Endpoint
Python
PowerShell
EnCase
FTK
Autopsy
X-Ways
Axiom
ELK
SIFT
Plaso
IBM Cloud
AWS
Azure
Linux
Windows