Cyber Incident Responder - Onsite TS/SCI Navy Ops

Leidos; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking two Incident Responders to join a mission-focused team supporting the Navy's cybersecurity environment at ONI Hopper Global Communications Center in Suitland, MD. The role runs 2nd or 3rd shifts, with training on day shift initially.

You will investigate, contain, and recover from cyber incidents across TS/SCI networks in a 24/7 operation. You will collaborate with cybersecurity, intelligence, and investigative partners and contribute to annual security exercises while

Qualifications

• Bachelor's or Master's with required years of experience per the ad.
• Active TS/SCI clearance and program access.
• Extensive experience in the Computer Network Defense (CND) discipline.
• Experience monitoring, analyzing, and investigating security alerts.
• Experience with SIEMs (Splunk, Elastic).
• Experience with NIDPS and host-based tools (Cisco FirePower, Palo Alto NGFW, Trellix ePO, Defender, Tanium).
• Knowledge of scripting/coding languages (Python, Perl, Ruby, JavaScript, PowerShell, C, C++, Java).
• Knowledge of penetration testing tools (Kali, SamuraiWTF, Nmap, Burp Suite, sqlmap, Metasploit).
• Knowledge of ticketing, reporting, and intelligence dissemination in cybersecurity.

Responsibilities

• Perform all phases of the incident response lifecycle: detection, analysis, containment, eradication, recovery.
• Respond to escalations from Tier 1 analysts and support TS/SCI networks (JWICS, ATLAS).
• Receive incident notifications via phone and email.
• Prepare ESAFs for the NNWC Electronic Spillage Center.
• Monitor DLP outputs for classified indicators and spillage signals.
• Coordinate with SSOs, JAG, ONI ISSM, Hopper ISSM, CNI, NAVNETWARCOM, IC SCC, NCDOC, NCIS, and other teams.
• Maintain detailed incident documentation and timelines.
• Participate in incident response meetings and annual security exercises.

Skills

Programming languages (Python, Perl,

Education

Bachelor's degree in Cybersecurity, Information Technology, Information Assurance, or related field

Master's degree in a related field

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Job description

Leidos is seeking two Incident Responders to join a mission-focused team supporting the Navy's cybersecurity environment at ONI Hopper Global Communications Center in Suitland, MD. The role runs 2nd or 3rd shifts, with training on day shift initially.

You will investigate, contain, and recover from cyber incidents across TS/SCI networks in a 24/7 operation. You will collaborate with cybersecurity, intelligence, and investigative partners and contribute to annual security exercises while