The Role
Monitor, investigate, and respond to cybersecurity incidents; perform forensic and root-cause analysis; contain, eradicate, and recover from threats; assess vulnerabilities; conduct post-incident reviews; improve response procedures and security controls; document incidents and author reports; collaborate with clients, government staff, auditors, IT, and security teams; and review junior analysts’ work.
Summary Generated by Built In
About Agile Defense
At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.
Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.
Requisition #: 1994
Job Title: Incident Response Analyst
Location: Remote
Clearance Level: Public Trust
Job Description
- An Incident Response Analyst is responsible for monitoring, investigating, and responding to cybersecurity incidents that may threaten an organization's systems, networks, or data.
- They analyze security alerts, identify potential threats, conduct forensic investigations, and implement containment, eradication, and recovery measures to minimize the impact of security breaches.
- Incident Response Analysts collaborate with security teams, IT personnel, and business stakeholders to strengthen security controls, document incidents, develop response procedures, and ensure compliance with organizational policies and regulatory requirements.
- They also perform threat analysis, vulnerability assessments, and post-incident reviews to improve the organization's overall security posture and reduce the risk of future cyberattacks.
SUMMARY:
Agile Defense is currently seeking a skilled Incident Response Analyst who can effectively respond to cybersecurity incidents, perform root cause analysis, and develop strategies to prevent future occurrences. The position involves applying cybersecurity expertise to resolve incidents, analyze security challenges of moderate complexity, and contribute to solutions that strengthen organizational defenses while working with a high degree of independence.
JOB DUTIES AND RESPONSIBILITIES
Education and Background
- Bachelors Degree with 5 years experience in Incident response
Required Skills
- 5+ years of experience with incident response
- Experience with handling and responding to an APT or FIN actor and responding to cloud-based threats in an IR capacity
- Experience with working directly with clients in a professional demeanor
- Experience with Microsoft Defender EDR
- Knowledge of SOC best practices
- Ability to work with government staff to suggest and implement process improvements and work with auditors to respond to and resolve identified issues in the IR processes
- Ability to author clear and robust reports and review and ensure QA of team member submissions
- Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Preferred Skills
- Experience with Splunk
- Experience with GitHub
- Experience with Archer
- Ability to review work from junior analysts and provide feedback for growth
In addition, Agile Defense invests in its employees beyond just compensation. Agile’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections.
Our Core Values
Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together.
What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are.
- Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
- Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
- Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
- Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
- Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
- Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
Skills Required
- Bachelor's degree
- 5+ years of incident response experience
- Experience handling and responding to APT or FIN actors
- Experience responding to cloud-based threats in an incident response capacity
- Experience working directly with clients professionally
- Experience with Microsoft Defender EDR
- Knowledge of SOC best practices
- Ability to work with government staff on incident response process improvements
- Ability to work with auditors to resolve incident response process issues
- Ability to author clear, robust reports and perform quality assurance reviews
- Ability to obtain and maintain a Public Trust or Suitability/Fitness determination
- Experience with Splunk
- Experience with GitHub
- Experience with Archer
- Ability to review junior analysts' work and provide developmental feedback
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Agile Defense is a technology services company that provides advanced digital transformation, data analytics, and cybersecurity solutions to support critical national security and civilian government missions. With a global presence, the company focuses on delivering outcome-driven, AI-powered capabilities to solve complex mission challenges for federal and defense customers.
