3rd Shift Incident Responder – TS/SCI Cyber Defense

Via Logic LLC; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking an Incident Responder (3rd Shift) to join a mission-focused cybersecurity team supporting the Office of Naval Intelligence at HGCC in Suitland, MD. You will defend Navy networks, respond to incidents, contain systems, and analyze artifacts to aid recovery.

Responsibilities span the full incident response lifecycle across TS/SCI environments, collaborating with security, intelligence, and investigative partners. Active clearance and strong CND/SIEM experience are essential.

Qualifications

• Bachelor’s degree in Cybersecurity or related field with 8+ years of experience, or Master’s with 6+ years.
• Active TS/SCI clearance.
• Extensive experience in the Computer Network Defense (CND) discipline.
• Experience with SIEM systems such as Splunk and Elastic.
• Experience with NIDPS like Cisco FirePower and Palo Alto NGFW, plus end-user tools.

Responsibilities

• Perform all phases of the incident response lifecycle, including detection, analysis, containment, eradication, and recovery.
• Receive and act on escalations from Tier 1 analysts, conduct spillage response and cleanup activities, and support incident response for TS/SCI networks, including JWICS, ATLAS, and other networks for which HGCC is responsible.
• Receive and respond to incident notifications from customers via telephone and email.
• Prepare and submit Electronic Spillage Assessment Forms (ESAFs) to the NNWC Electronic Spillage Center.
• Monitor Data Loss Prevention (DLP) outputs for classified code words and potential spillage indicators.
• Coordinate and communicate with internal and external stakeholders, including SSOs, JAG, ONI ISSM, Hopper ISSM, CNI, NAVNETWARCOM, IC SCC, NCDOC, NCIS, and other IC/DoD teams.
• Maintain detailed and accurate incident documentation and timelines throughout the response process.
• Participate in incident response meetings, briefings, and after action reviews.
• Support the execution and evaluation of annual security exercises.

Skills

CND discipline

SIEM (Splunk)

Elastic

Python

Education

Bachelor’s degree or higher in Cybersecurity/InfoSec

8+ years experience or Master’s +6 years

Tools

Splunk

Elastic

NIDPS

FirePower

Tanium

Job description

Leidos is seeking an Incident Responder (3rd Shift) to join a mission-focused cybersecurity team supporting the Office of Naval Intelligence at HGCC in Suitland, MD. You will defend Navy networks, respond to incidents, contain systems, and analyze artifacts to aid recovery.

Responsibilities span the full incident response lifecycle across TS/SCI environments, collaborating with security, intelligence, and investigative partners. Active clearance and strong CND/SIEM experience are essential.