Incident Response Analyst

Requisition #: 1994

Job Title: Incident Response Analyst

Location: Remote

Clearance Level: Public Trust

Job Description

SUMMARY:

Agile Defense is currently seeking a skilled Incident Response Analyst who can effectively respond to cybersecurity incidents, perform root cause analysis, and develop strategies to prevent future occurrences. The position involves applying cybersecurity expertise to resolve incidents, analyze security challenges of moderate complexity, and contribute to solutions that strengthen organizational defenses while working with a high degree of independence.

JOB DUTIES AND RESPONSIBILITIES

• An Incident Response Analyst is responsible for monitoring, investigating, and responding to cybersecurity incidents that may threaten an organization's systems, networks, or data.
• They analyze security alerts, identify potential threats, conduct forensic investigations, and implement containment, eradication, and recovery measures to minimize the impact of security breaches.
• Incident Response Analysts collaborate with security teams, IT personnel, and business stakeholders to strengthen security controls, document incidents, develop response procedures, and ensure compliance with organizational policies and regulatory requirements.
• They also perform threat analysis, vulnerability assessments, and post-incident reviews to improve the organization's overall security posture and reduce the risk of future cyberattacks.

Education and Background

• Bachelors Degree with 5 years experience in Incident response

Required Skills

• 5+ years of experience with incident response
• Experience with handling and responding to an APT or FIN actor and responding to cloud-based threats in an IR capacity
• Experience with working directly with clients in a professional demeanor
• Experience with Microsoft Defender EDR
• Knowledge of SOC best practices
• Ability to work with government staff to suggest and implement process improvements and work with auditors to respond to and resolve identified issues in the IR processes
• Ability to author clear and robust reports and review and ensure QA of team member submissions
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements

Preferred Skills

• Experience with Splunk
• Experience with GitHub
• Experience with Archer
• Ability to review work from junior analysts and provide feedback for growth