← All roles

Incident Response Team Lead (CBP)

Agile Defense· Cybersecurity
Apply on company site
Hybrid (Reston, VA)$155k - $180kRegularPosted 8mo ago

About the role

Experienced Cyber Incident Response Team Lead to support a 24/7/365 SOC, lead incident response lifecycle, and develop standard runbooks and playbooks for enterprise cybersecurity operations.

Responsibilities

  • Drive the incident response lifecycle to include incident detection, analysis, escalation, and coordinated response across all CSOC functions.
  • Develop and standardize incident response runbooks, playbooks, and communication protocols; ensure proper evidence handling and thorough documentation.
  • Monitor and improve key performance metrics (MTTA/MTTR); capture lessons learned and implement corrective actions to strengthen future response efforts.

Qualifications

  • Five (5) years of progressive professional experience in incident response, SOC analysis, cyber security issues, incidents, hunts or digital forensics and operations, and computer incident response lifecycle.
  • Proficient use of cyber tools including SIEM, network analysis, live response, EDR tools, IPS/IDS, CSOC ticketing platforms.
  • Bachelor of Science in computer science, engineering, STEM or cybersecurity IT or cyber security or eight (8) years of relevant experience in lieu of a degree.

Skills

Required:Incident responseSIEMNetwork analysisLive responseEDR/IPS/IDS
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Agile Defense

Always Evolving

Agile Defense delivers advanced capabilities and solutions tailored to the most critical national security and civilian missions.

national securitycivilian missionsinnovationcapabilitiessolutions
Company profileWebsite

More open roles at Agile Defense