{"id":3851608,"url":"https://alion.io/job/agile-defense-incident-response-analyst","title":"Incident Response Analyst","company":{"id":716156,"name":"Agile Defense","domain":"agiledefense.com","url":"https://alion.io/company/agiledefense","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":76,"open_postings":37,"ghost_share":0,"stale_share":0.946,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":100000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"GitHub","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-11-05T23:13:12Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-11T01:42:50Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Requisition #: 1994\nJob Title: Incident Response Analyst\nLocation: Remote\nClearance Level: Public Trust\nJob Description\nSUMMARY:\nAgile Defense is currently seeking a skilled Incident Response Analyst who can effectively respond to cybersecurity incidents, perform root cause analysis, and develop strategies to prevent future occurrences. The position involves applying cybersecurity expertise to resolve incidents, analyze security challenges of moderate complexity, and contribute to solutions that strengthen organizational defenses while working with a high degree of independence.\nJOB DUTIES AND RESPONSIBILITIES\nAn Incident Response Analyst is responsible for monitoring, investigating, and responding to cybersecurity incidents that may threaten an organization's systems, networks, or data.\nThey analyze security alerts, identify potential threats, conduct forensic investigations, and implement containment, eradication, and recovery measures to minimize the impact of security breaches.\nIncident Response Analysts collaborate with security teams, IT personnel, and business stakeholders to strengthen security controls, document incidents, develop response procedures, and ensure compliance with organizational policies and regulatory requirements.\nThey also perform threat analysis, vulnerability assessments, and post-incident reviews to improve the organization's overall security posture and reduce the risk of future cyberattacks.\nEducation and Background\nBachelors Degree with 5 years experience in Incident response\nRequired Skills\n5+ years of experience with incident response\nExperience with handling and responding to an APT or FIN actor and responding to cloud-based threats in an IR capacity\nExperience with working directly with clients in a professional demeanor\nExperience with Microsoft Defender EDR\nKnowledge of SOC best practices\nAbility to work with government staff to suggest and implement process improvements and work with auditors to respond to and resolve identified issues in the IR processes\nAbility to author clear and robust reports and review and ensure QA of team member submissions\nAbility to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements\nPreferred Skills\nExperience with Splunk\nExperience with GitHub\nExperience with Archer\nAbility to review work from junior analysts and provide feedback for growth","description_format":"text","description_chars":2397,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Digital Government","Managed Security","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-11-06T03:37:31Z"}],"visa":[],"liveness":{"score":70,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.695,"p_room":1,"age_days":4,"expected_fill_days":41,"reasons":["conf:2","stale_co","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-11-10T06:52:35Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/agile-defense-incident-response-analyst","json_url":"https://alion.io/job/agile-defense-incident-response-analyst.json","meta":{"generated_at":"2026-11-11T04:47:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5689,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716156},"rest":"https://alion.io/mcp/rest/get_company?id=716156"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fagile-defense-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fagile-defense-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fagile-defense-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/agile-defense-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fagile-defense-incident-response-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3851608}},{"tool":"search_jobs","arguments":{"company":"agiledefense.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3851608},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}