2nd Shift Incident Responder — Cyber Defense (TS/SCI)

Via Logic LLC; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Benefits offered by this job

Health and Wellness programs

Income Protection

Paid Leave and Retirement

Job summary

Leidos is seeking an Incident Responder (2nd Shift) to join a cybersecurity team supporting ONI at HGCC in Suitland, MD. The role centers on defending TS/SCI networks, responding to incidents, containing affected systems, and coordinating with security partners.

The candidate will work across the incident response lifecycle, gain experience with high-sensitivity environments, and participate in annual security exercises. Local Shift hours are 15:30–23:30.

Qualifications

• Bachelor's degree in Cybersecurity, IT, Information Assurance or related field with 8+ years of experience or Master’s with 6+ years.
• Active TS/SCI security clearance.
• Extensive experience in Computer Network Defense (CND).
• Experience monitoring, analyzing, and investigating alerts from cybersecurity tools.

Responsibilities

• Perform all phases of the incident response lifecycle (detection to recovery).
• Receive escalations from Tier 1 analysts and support TS/SCI networks (JWICS, ATLAS).
• Collect and analyze digital artifacts to support response and recovery.
• Coordinate with security and investigative partners across multiple teams.

Skills

TS/SCI clearance

Incident response

CND discipline

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Python

Perl

Ruby

JavaScript

PowerShell

C

C++

Java

Pentesting

Red team

Ticketing & reporting

Education

Bachelor's degree in Cybersecurity or related

Master’s degree in related field preferred

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Job description

Leidos is seeking an Incident Responder (2nd Shift) to join a cybersecurity team supporting ONI at HGCC in Suitland, MD. The role centers on defending TS/SCI networks, responding to incidents, containing affected systems, and coordinating with security partners.

The candidate will work across the incident response lifecycle, gain experience with high-sensitivity environments, and participate in annual security exercises. Local Shift hours are 15:30–23:30.