Agile Defense is hiring a
Cyber Threat Analyst

Summary

Agile Defense is seeking a Cyber Threat Analyst for a challenging position supporting one of their premier clients who conducts 24/7 operations. The ideal candidate will have hands-on experience as a Cyber Defense analyst and should be proficient with M365 Defender, Azure Sentinel, and KQL.

Requirements

• The ideal candidate will have hands-on experience as a Cyber Defense analyst performing Incident Response and Intrusion Detection on a large operational network
• Required Skills: A minimum of 3 years direct experience providing TH support, including performing log and event review and incident response
• Required Skills: Demonstrated proficiency with M365 Defender and Azure Sentinel
• Required Skills: Demonstrated experience leveraging KQL (or similar query language) in support of TH duties
• Required Skills: Demonstrated experience leveraging SIEM, SOAR and other tools to identify threat activity and incidents
• Required Skills: Demonstrated experience in delivering effective written and verbal communication and collaboration skills
• Required Skills: Demonstrated experience in providing TH support with accuracy for effected resolution and documentation purposes
• Required Skills: Demonstrated experience in supporting multiple cybersecurity incidents simultaneously
• Required Skills: Demonstrated experience in adapting easily to learning new technologies
• Required Skills: Demonstrated ability to follow written and verbal instructions

Responsibilities

The existing team is a multi-faceted interdisciplinary set of experts with ever-increasing prowess in this unique atmosphere. Our security operations project is aimed at establishing innovative techniques for a comprehensive, cloud-first network enclave defense, identifying the emerging threats, and detecting malicious activity using advanced toolsets provided in the Microsoft cloud security ecosystem

Preferred Qualifications

Nice to have: At least one of the following or equivalent IT certifications: CEH (Certified Ethical Hacker), GSEC (GIAC Security Essentials), GCIH (GIAC Certified Incident Handler), Security+

Benefits

• Environmental Conditions: Remote - Must be local to the Washington, D.C. area
• Working Conditions: Hours: Monday to Friday from 12pm-8pm