Qualification

ExperienceCore KnowledgeTool ExperienceSkillsCommunicationEnvironmentClearanceRequired CertificationsCompTia Security+Military/DoD ExperienceCyber Security ControlsNetwork Analysis

Required

Experience: Minimum of 2-5 years of experience in a dedicated incident response, security operations center (SOC), or closely related cybersecurity role.
A bachelor’s degree in cyber security or related field can replace experience requirements.
Core Knowledge: Strong understanding of the incident response lifecycle (e.g., NIST framework), common attack vectors, and foundational network and endpoint forensics.
Tool Experience: Hands-on experience investigating and responding to threats using Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) platforms.
Skills: Proven analytical and problem-solving abilities, with a capacity to work independently on incidents of varying complexity.
Communication: Excellent communication skills, with demonstrated ability to write clear, concise incident reports and collaborate effectively with other technical teams.
Environment: Proven ability to work in a fast-paced 24x7 security operations environment, effectively managing and prioritizing multiple incidents.
Clearance: Must be able to obtain and maintain a Secret security clearance.
Required Certifications
Candidates must possess one of the following certifications prior to start date:
CompTia Security+, Certified Ethical Hacker (CEH), CYSA+

Preferred

Military/DoD Experience: Familiarity with U.S. military policies, procedures, and organizational structures.
Cyber Security Controls: Foundational understanding of cybersecurity controls and the importance of adhering to security policies in a professional environment.
Network Analysis: Basic experience reviewing network activity logs and an understanding of common network protocols (e.g., DNS, HTTP, SMB).
Endpoint Security: Familiarity with reviewing security events from standard endpoint platforms (e.g., antivirus, host firewalls).
Tool Familiarity: Exposure to or academic experience with some of the following tools:
A SIEM platform (e.g., Splunk, Kibana, Sentinel)
MDE EDR platform and or KQL
ServiceNow or another ticketing system

Cyber Security Incident Response Analyst – Intermediate at Agile Defense · LumiJobs

Cyber Security Incident Response Analyst – Intermediate

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Agile Defense

More roles at Agile Defense