Cyber Incident Responder - Onsite TS/SCI (Weekday Shifts)

Leidos; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is hiring two Incident Responders to support the Navy’s cybersecurity environment at ONI HGCC in Suitland, MD. The role involves defending critical maritime intelligence networks, investigating incidents, containing affected systems, and analyzing artifacts across the incident response lifecycle.

Regular shifts are 2nd and 3rd weekdays, with initial training during day shift. Requires Active TS/SCI clearance and extensive CND/SIEM experience; on-site at Suitland, MD.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Information Assurance, or related field with 8+ years of experience or Master’s with 6+ years.
• Active TS/SCI clearance in DISS.
• Extensive experience in Computer Network Defense (CND) and monitoring/analyzing security alerts.
• Experience with SIEM systems such as Splunk and Elastic.

Responsibilities

• Perform all phases of the incident response lifecycle: detection, analysis, containment, eradication, recovery.
• Receive escalations from Tier 1 analysts and support incident response for TS/SCI networks.
• Respond to incident notifications via phone and email.
• Submit ESAFs to the NNWC Electronic Spillage Center.
• Monitor DLP outputs for classified code words and spillage indicators.
• Coordinate with SSOs, JAG, and IC/DoD teams for incident response.
• Maintain detailed incident documentation and timelines.

Skills

Cybersecurity monitoring

Incident analysis

Scripting (Python/PowerShell)

Digital forensics

Education

Bachelor's degree in Cybersecurity/IT

Master’s degree in related field

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Nmap

Burp Suite

Kali

Job description

Leidos is hiring two Incident Responders to support the Navy’s cybersecurity environment at ONI HGCC in Suitland, MD. The role involves defending critical maritime intelligence networks, investigating incidents, containing affected systems, and analyzing artifacts across the incident response lifecycle.

Regular shifts are 2nd and 3rd weekdays, with initial training during day shift. Requires Active TS/SCI clearance and extensive CND/SIEM experience; on-site at Suitland, MD.