Cyber Defense Incident Responder — 3rd Shift (TS/SCI)

Leidos; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking an Incident Responder for the 3rd shift at HGCC in Suitland, MD. You will defend Navy networks, respond to incidents, contain affected systems, and support recovery, operating in highly sensitive TS/SCI environments.

You will coordinate with cybersecurity and investigative partners, prepare ESAFs, monitor DLP for spillage indicators, and contribute to annual security exercises. This role requires strong incident handling and collaboration across teams.

Qualifications

• 8+ years in cybersecurity or related field
• Active TS/SCI clearance
• Strong experience with CND
• Experience with SIEM and NIDS/NIPS
• Knowledge of scripting languages

Responsibilities

• Perform all phases of the incident response lifecycle from detection to recovery.
• Respond to escalations from Tier 1 analysts and support TS/SCI networks like JWICS and ATLAS.
• Monitor DLP outputs and analyze potential spillage indicators.
• Coordinate with SSOs, JAG, ONI ISSM and other DoD teams.
• Maintain incident documentation and timelines throughout the response.

Skills

Cybersecurity

CND

SIEM

NIDPS

Palo Alto NGFW

Python

PowerShell

Java

Kali

Nmap

Burp Suite

Trellix ePO

Education

Bachelor's degree in Cybersecurity

Master's degree (preferred)

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Job description

Leidos is seeking an Incident Responder for the 3rd shift at HGCC in Suitland, MD. You will defend Navy networks, respond to incidents, contain affected systems, and support recovery, operating in highly sensitive TS/SCI environments.

You will coordinate with cybersecurity and investigative partners, prepare ESAFs, monitor DLP for spillage indicators, and contribute to annual security exercises. This role requires strong incident handling and collaboration across teams.