2nd Shift Cyber Incident Responder (TS/SCI)

Leidos; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking an Incident Responder (2nd Shift) to join a mission-focused cybersecurity team supporting ONI at the Hopper Global Communications Center in Suitland, MD. You will defend Navy networks, respond to incidents, contain effects, and analyze artifacts across the response lifecycle.

The role requires TS/SCI clearance and hands-on experience with CND, SIEMs, NIDPS, and scripting. Work hours are 1530–2330 with occasional floater shifts.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Information Assurance, or a related area with 8+ years of experience or Master’s with 6+ years of experience.
• Active TS/SCI security clearance.
• Extensive experience in the Computer Network Defense (CND) discipline.
• Significant professional experience monitoring, analyzing, and investigating alerts generated by cybersecurity tools.
• Experience with SIEM systems such as Splunk and Elastic.
• Knowledge of NIDPS and host-based tools (Cisco FirePower, Palo Alto NGFW, Trellix ePO, Defender, Tanium).
• Knowledge of scripting and coding languages (Python, Perl, Ruby, JavaScript, PowerShell, C, C++, Java).
• Knowledge of penetration testing/tools (Kali, Burp Suite, Metasploit) and ticketing/reporting.

Responsibilities

• Perform all phases of the incident response lifecycle (detection, analysis, containment, eradication, recovery).
• Receive and act on escalations from Tier 1 analysts and support TS/SCI networks (JWICS, ATLAS).
• Respond to incident notifications via phone and email and document timelines.
• Submit ESAFs to NNWC Electronic Spillage Center.
• Monitor DLP outputs for classified indicators of spillages.
• Coordinate with SSOs, JAG, ONI ISSM, and other DoD/IC teams.
• Participate in incident response meetings and after-action reviews.
• Support annual security exercises.

Skills

CND experience

Incident response

Threat analysis

Python scripting

PowerShell

Java/C++

Education

Bachelor's degree

Master's degree

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Job description

Leidos is seeking an Incident Responder (2nd Shift) to join a mission-focused cybersecurity team supporting ONI at the Hopper Global Communications Center in Suitland, MD. You will defend Navy networks, respond to incidents, contain effects, and analyze artifacts across the response lifecycle.

The role requires TS/SCI clearance and hands-on experience with CND, SIEMs, NIDPS, and scripting. Work hours are 1530–2330 with occasional floater shifts.