Incident Response Analyst
Description
Job Description
SUMMARY:
Agile Defense is currently seeking a skilled Incident Response Analyst who can effectively respond to cybersecurity incidents, perform root cause analysis, and develop strategies to prevent future occurrences. The position involves applying cybersecurity expertise to resolve incidents, analyze security challenges of moderate complexity, and contribute to solutions that strengthen organizational defenses while working with a high degree of independence.
JOB DUTIES AND RESPONSIBILITIES
- An Incident Response Analyst is responsible for monitoring, investigating, and responding to cybersecurity incidents that may threaten an organization's systems, networks, or data.
- They analyze security alerts, identify potential threats, conduct forensic investigations, and implement containment, eradication, and recovery measures to minimize the impact of security breaches.
- Incident Response Analysts collaborate with security teams, IT personnel, and business stakeholders to strengthen security controls, document incidents, develop response procedures, and ensure compliance with organizational policies and regulatory requirements.
- They also perform threat analysis, vulnerability assessments, and post-incident reviews to improve the organization's overall security posture and reduce the risk of future cyberattacks.
Education and Background
- Bachelors Degree with 5 years experience in Incident response
Required Skills
- 5+ years of experience with incident response
- Experience with handling and responding to an APT or FIN actor and responding to cloud-based threats in an IR capacity
- Experience with working directly with clients in a professional demeanor
- Experience with Microsoft Defender EDR
- Knowledge of SOC best practices
- Ability to work with government staff to suggest and implement process improvements and work with auditors to respond to and resolve identified issues in the IR processes
- Ability to author clear and robust reports and review and ensure QA of team member submissions
- Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Preferred Skills
- Experience with Splunk
- Experience with GitHub
- Experience with Archer
- Ability to review work from junior analysts and provide feedback for growth
- Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
- Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
- Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
- Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
- Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
- Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.
Skills
As published by lever · 22 questions · 5 written answers
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company
Short answers (2)
- What is your full street address? (Street, City, State, Zip)
- What is your desired salary?
Pick from a list (14)
- Do you have a Department of Defense (DOD) Recognized Security Clearance?
- What level of DOD clearance do you have?
- Are you authorized to work in the United States?
- Will you now or in the future require sponsorship for employment visa status (e.g., H-1B visa status)?
- Are you open to relocating for this position, or another position with Agile Defense?
- Are you a current employee of Agile Defense or any of its subsidiaries, affiliates, or acquired companies?
- Have you ever been employed by Agile Defense or any of its subsidiaries, affiliates, or acquired companies?
- How did you hear about us?
- Do you have a higher education degree?
- What is your highest level of education?
- Do you have any active industry related certifications?
- Are you a current or former U.S. Government employee or U.S. armed forces?
- Are you currently subject to any post-employment obligations from a current or former employer that could restrict your ability to perform this role if hired?
- I certify that the information provided is accurate to the best of my knowledge and understand that additional details may be requested later in the hiring process.
Written answers (5)
- If you were referred, please list the referrer's name and any other details here: optional
- What active industry related certifications do you have?
- If yes, please briefly describe the type of obligation and its duration (you may exclude employer names and confidential terms). If no, please respond with "N/A".
- If hired, would you have any ongoing outside employment, consulting, or business activities that could conflict with this role or the company’s interests?
- If yes, please briefly describe. If no, please respond with "N/A".
Attachments (1)
- Please upload a copy of your certification(s) if applicable optional