Monitor, investigate, and respond to cybersecurity incidents; perform forensic and root-cause analysis; contain, eradicate, and recover from threats; assess vulnerabilities; conduct post-incident reviews; improve response procedures and security controls; document incidents and author reports; collaborate with clients, government staff, auditors, IT, and security teams; and review junior analysts’ work.
About Agile Defense
At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.
Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.
Requisition #: 1994
Job Title: Incident Response Analyst
Location: Remote
Clearance Level: Public Trust
Job Description
- An Incident Response Analyst is responsible for monitoring, investigating, and responding to cybersecurity incidents that may threaten an organization's systems, networks, or data.
- They analyze security alerts, identify potential threats, conduct forensic investigations, and implement containment, eradication, and recovery measures to minimize the impact of security breaches.
- Incident Response Analysts collaborate with security teams, IT personnel, and business stakeholders to strengthen security controls, document incidents, develop response procedures, and ensure compliance with organizational policies and regulatory requirements.
- They also perform threat analysis, vulnerability assessments, and post-incident reviews to improve the organization's overall security posture and reduce the risk of future cyberattacks.
SUMMARY:
Agile Defense is currently seeking a skilled Incident Response Analyst who can effectively respond to cybersecurity incidents, perform root cause analysis, and develop strategies to prevent future occurrences. The position involves applying cybersecurity expertise to resolve incidents, analyze security challenges of moderate complexity, and contribute to solutions that strengthen organizational defenses while working with a high degree of independence.
JOB DUTIES AND RESPONSIBILITIES
Education and Background
- Bachelors Degree with 5 years experience in Incident response
Required Skills
- 5+ years of experience with incident response
- Experience with handling and responding to an APT or FIN actor and responding to cloud-based threats in an IR capacity
- Experience with working directly with clients in a professional demeanor
- Experience with Microsoft Defender EDR
- Knowledge of SOC best practices
- Ability to work with government staff to suggest and implement process improvements and work with auditors to respond to and resolve identified issues in the IR processes
- Ability to author clear and robust reports and review and ensure QA of team member submissions
- Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Preferred Skills
- Experience with Splunk
- Experience with GitHub
- Experience with Archer
- Ability to review work from junior analysts and provide feedback for growth
In addition, Agile Defense invests in its employees beyond just compensation. Agile’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections.
Our Core Values
Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together.
What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are.
- Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
- Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
- Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
- Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
- Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
- Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
Similar Jobs
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
Leads complex cybersecurity incidents and digital forensics and incident response investigations. Responsibilities include incident command, threat hunting, triage, root-cause analysis, corrective-action reporting, process development, technical project leadership, executive presentations, global on-call participation, and mentoring junior analysts. The role supports cybersecurity strategy and protects critical aerospace systems.
Top Skills:
AWSAzureDockerEdrKubernetesLinuxmacOSMicrosoft 365PowershellPythonShellSIEMSoarWindows
Artificial Intelligence • Consumer Web • eCommerce • Software
Leads Tier 3 incident response for APT, financially motivated, and AWS cloud threats. Investigates, contains, and remediates incidents using Splunk, SOAR, Microsoft Defender EDR, AWS telemetry, MITRE ATT&CK, and NIST 800-61. Mentors analysts, reviews and authors incident reports, improves IR processes, supports audits, and serves in a weekly after-hours on-call rotation while working directly with government clients.
Top Skills:
ArcherAWSCloudtrailCrowdstrikeGitGuarddutyIamLinuxMicrosoft Defender EdrMitre Att&CkNist 800-61PythonRsa Archer GrcSentineloneSplSplunkSplunk Soar
Energy • Manufacturing
Senior individual contributor responsible for incident response readiness, business continuity, disaster recovery, and cyber resilience. Develops and maintains response plans, playbooks, recovery artifacts, escalation paths, and dependency mappings; coordinates incident response activities, readiness exercises, war rooms, training, stakeholder communications, and post-incident reviews. Advises Product Owners and business stakeholders, manages third-party dependencies, measures program health, and drives remediation of readiness gaps across technology and business environments.
Top Skills:
Backup And Replication TechnologiesCloud ServicesCybersecurity OperationsIso 22301ItilNetworkingVirtualization
What you need to know about the Austin Tech Scene
Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.
Key Facts About Austin Tech
- Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
- Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
- Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
- Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center



