Quick overview
Job description
Job Description
- An Incident Response Analyst is responsible for monitoring, investigating, and responding to cybersecurity incidents that may threaten an organization's systems, networks, or data.
- They analyze security alerts, identify potential threats, conduct forensic investigations, and implement containment, eradication, and recovery measures to minimize the impact of security breaches.
- Incident Response Analysts collaborate with security teams, IT personnel, and business stakeholders to strengthen security controls, document incidents, develop response procedures, and ensure compliance with organizational policies and regulatory requirements.
- They also perform threat analysis, vulnerability assessments, and post-incident reviews to improve the organization's overall security posture and reduce the risk of future cyberattacks.
SUMMARY:
Agile Defense is currently seeking a skilled Incident Response Analyst who can effectively respond to cybersecurity incidents, perform root cause analysis, and develop strategies to prevent future occurrences. The position involves applying cybersecurity expertise to resolve incidents, analyze security challenges of moderate complexity, and contribute to solutions that strengthen organizational defenses while working with a high degree of independence.
JOB DUTIES AND RESPONSIBILITIES
Education and Background
- Bachelors Degree with 5 years experience in Incident response
Required Skills
- 5+ years of experience with incident response
- Experience with handling and responding to an APT or FIN actor and responding to cloud-based threats in an IR capacity
- Experience with working directly with clients in a professional demeanor
- Experience with Microsoft Defender EDR
- Knowledge of SOC best practices
- Ability to work with government staff to suggest and implement process improvements and work with auditors to respond to and resolve identified issues in the IR processes
- Ability to author clear and robust reports and review and ensure QA of team member submissions
- Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Preferred Skills
- Experience with Splunk
- Experience with GitHub
- Experience with Archer
- Ability to review work from junior analysts and provide feedback for growth
- Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
- Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
- Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
- Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
- Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
- Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.
Similar jobs
- FA
Senior Infrastructure Security EngineerRecently posted Auto Apply
Fal Ai · San Francisco · Hybrid 🇺🇸
RustCUDAPython+2Technology$180k - $250k/yr - FA
Staff Security EngineerRecently posted Auto Apply
Fal Ai · San Francisco · Hybrid 🇺🇸
GCPRustAWS+8Technology$180k - $250k/yr - GD

Security SpecialistRecently posted Auto Apply
Gavin de Becker & Associates (Website) · Kihei · Hybrid 🇺🇸
MAUI$81k - $100k/yr - FO

Facility Security OfficerRecently posted Auto Apply
Fortastra Corporation · Torrance · Hybrid 🇺🇸
RecruitingComplianceConstruction$195k - $225k/yr - BL

Security EngineerRecently posted Auto Apply
Blueberrypediatrics · Remote · Remote 🇺🇸
DjangoGCPGoogle Cloud+3Technology$110k - $140k/yr - NS

Staff Identity Governance EngineerRecently posted Auto Apply
Nscale · New York; San Francisco; Seattle · Hybrid 🇺🇸
WorkdayGoogle WorkspaceGit+2Engineering$170k/yr - VA

Senior Security Engineer, Identity & Access ManagementRecently posted Auto Apply
Valon · Remote · Remote 🇺🇸
GCPGoogle WorkspaceMFA+10Technology$180k - $230k/yr - CA

Physical Security SpecialistRecently posted Auto Apply
Castelion Corporation · Allen · Hybrid 🇺🇸
ComplianceAdministrativeSalary not listed - SA

Security LeadRecently posted Auto Apply
Sable · San Francisco · On-site 🇺🇸
SOC 2ComplianceLLM+2Salary not listed - SE

Director of Security & RiskRecently posted Auto Apply
Sentilink · United States · Remote 🇺🇸
AWSPCI DSSSOC 2+4$200k - $260k/yr - AD

Baseline Security EngineerRecently posted Auto Apply
Agile Defense · Remote · Remote 🇺🇸
AWSAPI GatewayELK+17Technology$135k - $150k/yr - RE

Cybersecurity AnalystRecently posted Auto Apply
Redwoodcu · Napa · On-site 🇺🇸
Microsoft OfficeAzureJira+1Technology$100.6k - $132.6k/yr