Senior Cyber Security Incident Response Analyst
Real job — pulled straight from Agile Defense’s careers page · Verified November 13, 2026 · No reposts.
Job description
Agile Defense is hiring a Senior Cyber Security Incident Response Analyst — a full-time, based in Fort Huachuca, AZ role. Apply directly on Agile Defense's careers page below.
Senior Cyber Security Incident Response Analyst
Team: Cyber Defense
Location: Fort Huachuca, AZ
Commitment: Regular
Workplace Type: onsite
This role is responsible for conducting highly technical investigations into cyber security incidents, managing the full incident lifecycle from initial detection and triage through containment, eradication, recovery, and post-incident review. Coordinates incident response activities with GCC teams, supported unit commanders, NETCOM, and ARCYBER; working with the forensics SME to investigate incidents and analyze digital evidence; documenting incident scope, impact, root cause, and remediation actions; maintaining complete case records; and developing response playbooks, lessons learned, and process improvements to strengthen the GCC Cybersecurity Service Provider (CSSP) mission.
Responsibilities include:
-
Manage the full cyber incident lifecycle — from initial detection and triage through containment, eradication, recovery, and post-incident review — ensuring all actions are executed in accordance with NIST SP 800-61 Rev. 3 and Army incident response procedures.
-
Coordinate with internal GCC teams, supported unit commanders, NETCOM, and ARCYBER during active cyber incidents, serving as the primary point of contact for incident status updates and ensuring timely, accurate communication.
-
Produce comprehensive analysis reports that document the timeline, scope, impact, root cause, and remediation actions for each cyber incident.
-
Maintain accurate and up-to-date incident tracking records, ensuring all case data, evidence artifacts, analyst notes, and closure documentation meet GCC quality standards and audit requirements.
-
Ability to conduct post-incident reviews and lessons-learned sessions following significant cyber events, identifying process gaps, detection failures, and response inefficiencies, and translating findings into actionable improvements for the GCC CSSP.
-
Serve as a technical leader by providing mentorship to associate-level staff, performing quality assurance reviews of team output.
-
Develop, maintain, and exercise incident response playbooks for common attack scenarios (ransomware, phishing, credential theft, insider threat), ensuring procedures remain current with the evolving threat landscape, Army policy requirements, and mission success.
Experience:
-
Active DoD Top Secret/SCI clearance
-
Experience with Security Operations (SecOps) module for incident tracking and SLA management
-
Proficiency with Elastic Stack for SIEM-based alert triage, event correlation, and incident timeline reconstruction
-
Working knowledge of NIST SP 800-61 Rev.3 Computer Security Incident Handling Guide and DoD/Army incident response policy frameworks
-
Experience developing and exercising incident response playbooks for common cyber-attack scenarios in a DoD environment
-
Familiarity with digital forensics tools and techniques for evidence collection, chain of custody, and artifact analysis
Certification Requirements:
-
DoW 8140 Compliance – DCWF 531 Advanced prior to start date.
- Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
- Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
- Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
- Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
- Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
- Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.
Get Senior Cyber Security Incident Response Analyst jobs like this→
New roles from thousands of companies land hourly, straight from their careers pages. Get the freshest matches by email so you never miss one.
Email me new jobsSimilar jobs
Frequently asked questions
What skills are required for Senior Cyber Security Incident Response Analyst at Agile Defense?
The required skills for Senior Cyber Security Incident Response Analyst at Agile Defense include: SIEM, CompTIA Security+.
What is the seniority level for Senior Cyber Security Incident Response Analyst at Agile Defense?
Senior Cyber Security Incident Response Analyst at Agile Defense is a Senior level position.
How do I apply for Senior Cyber Security Incident Response Analyst at Agile Defense?
You can view the full description and apply for Senior Cyber Security Incident Response Analyst at Agile Defense on EchoJobs: https://echojobs.io/job/agile-defense-senior-cyber-security-incident-response-analyst-kwtj7.