Incident Response Team Lead - CBP
About the job
- Five years of progressive professional experience in an incident response role, SOC analyst role emphasizing cybersecurity issues, incidents, hunts or digital forensics and operations, and the computer incident response lifecycle.
- Proficient use of Security Information and Event Management systems, network analysis, live response, endpoint detection and response tools, intrusion prevention and detection systems, and CSOC ticketing platforms.
- Certified Information Systems Security Professional certification.
- One or more of the following certifications: GIAC Certified Intrusion Analyst, GIAC Certified Incident Handler, GIAC Certified Forensic Analyst, SANS GIAC Certified Enterprise Defender, or another Information Assurance Technician Level III certification in accordance with Department of Defense Directive 8570.1.
- A Bachelor of Science in computer science, engineering, STEM, cybersecurity IT, or cybersecurity, or eight years of relevant work experience in lieu of a degree.
- Active Top Secret clearance with Sensitive Compartmented Information eligibility, and the ability to obtain and maintain a Customs and Border Protection background investigation and entry on duty.
- Drive the incident response lifecycle, including incident detection, analysis, escalation, and coordinated response across all Cybersecurity Operations Center functions.
- Develop and standardize incident response runbooks, playbooks, and communication protocols.
- Ensure proper evidence handling and thorough documentation.
- Monitor and improve key performance metrics, including mean time to acknowledge and mean time to remediate.
- Capture lessons learned and implement corrective actions to strengthen future response efforts.
- An active Customs and Border Protection background investigation is strongly preferred.
- One or more of the following certifications: GIAC Certified Penetration Tester, GIAC Reverse Engineering Malware, GIAC Certified Forensic Analyst, GIAC Forensic Network Analyst, or GIAC certification.
- Familiarity with cloud environments.
About the company
Agile Defense provides IT and cybersecurity services to the U.S. Federal Government, including digital transformation, IT modernization, and a Virtual Security Operations Center (VSOC) to defend against cyber threats. Its services support national security and civilian missions across federal agencies, delivered through various contract vehicles. The company expands its capabilities through acquisitions (IntelliBridge and XOR Security) and focuses on AI-enabled workforce transformation and enterprise IT to enhance government operations. Unlike many suppliers, Agile Defense emphasizes a government-focused portfolio with a multidimensional VSOC and AI-driven workforce upgrades, positioning itself to meet federal security and modernization needs. The goal is to help federal agencies protect data and systems, modernize IT infrastructure, and improve cyber resilience across national security and civilian missions.
Company Size
1,001-5,000
Company Stage
Acquired
Total Funding
N/A
Headquarters
Reston, Virginia
Founded
1998
Get referred to Agile Defense
See people who can refer or advise you
Simplify's Take
What believers are saying
- Agile Defense won $250 million Navy logistics IT work on August 13, 2026.
- It won a $100 million Tradewinds OTA for NORAD and USNORTHCOM on July 15, 2026.
- USCIS awarded Agile Defense a five-year, $118 million RAPID contract on April 20, 2026.
What critics are saying
- Federal contract protests can freeze revenue, as GSA Polaris awards stayed contestable in June 2026.
- Agile Defense's headcount fell 6.7% year over year by March 2026.
- If Alliant 3 and RAPID recompetes slip in 2027, the pipeline breaks.
What makes Agile Defense unique
- Agile Defense pairs federal cyber services with AI, data, and digital transformation.
- Its November 2025 IntelliBridge integration unified delivery, finance, growth, and leadership.
- The February 2026 Alliant 3 award shows competitiveness in governmentwide acquisition vehicles.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Remote Work Options
- Flexible Work Hours
- Wellness Program
- Mental Health Support