2nd Shift Incident Responder – TS/SCI Cyber Defense

Leidos Inc; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Benefits offered by this job

Health and Wellness programs

Income protection

Paid leave and retirement

Job summary

Leidos is seeking an Incident Responder (2nd Shift) to defend Navy maritime networks. You will handle incident detection, analysis, containment, eradication, and recovery, coordinating with IC partners to protect TS/SCI environments from cyber threats. The role requires 2nd shift hours (1530–2330) in Suitland, MD.

Responsibilities include handling escalations, ESF submissions, and DLP monitoring, with heavy emphasis on timely, accurate incident documentation and cross-team collaboration.

Qualifications

• Bachelor's degree in Cybersecurity or related field with 8+ years of experience.
• Active TS/SCI clearance.
• Extensive experience in the Computer Network Defense (CND) discipline.
• Experience with SIEM systems such as Splunk and Elastic.
• Experience with NIDPS and host-based tools.
• Knowledge of scripting languages (Python, PowerShell, etc.).
• Knowledge of penetration testing tools and red team tactics.
• Knowledge of ticketing and incident documentation.

Responsibilities

• Perform all phases of the incident response lifecycle.
• Coordinate with internal and external stakeholders including SSOs, JAG and ONI ISSM.
• Respond to incident notifications via telephone and email.
• Prepare and submit ESAFs to NNWC Electronic Spillage Center.
• Monitor DLP outputs for classified indicators.
• Maintain detailed incident timelines and documentation.
• Participate in incident response meetings and after-action reviews.
• Support annual security exercises.

Skills

Incident response

Threat hunting

Communication

Documentation

Teamwork

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Python/PowerShell

Kali/Nessus/Burp Suite

Nmap

Job description

Leidos is seeking an Incident Responder (2nd Shift) to defend Navy maritime networks. You will handle incident detection, analysis, containment, eradication, and recovery, coordinating with IC partners to protect TS/SCI environments from cyber threats. The role requires 2nd shift hours (1530–2330) in Suitland, MD.

Responsibilities include handling escalations, ESF submissions, and DLP monitoring, with heavy emphasis on timely, accurate incident documentation and cross-team collaboration.