Cyber Incident Responder – TS/SCI Onsite (2nd/3rd Shift)

Leidos; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking two Incident Responders to support the Navy's cybersecurity operations at the ONI HGCC in Suitland, MD. The role requires handling 2nd and 3rd shifts on weekdays, with training during the day shift for the first two months.

You will defend critical networks, investigate incidents, contain systems, and coordinate with security peers. A TS/SCI clearance and extensive incident response expertise are required for this full-time, on-site position.

Qualifications

• Active TS/SCI clearance required.
• 8+ years of experience in cybersecurity defense or 6+ years with a Master’s degree.
• Experience with SIEMs such as Splunk and Elastic.
• Experience with NIDPS (Cisco FirePower, Palo Alto NGFW) and host-based tools (Trellix ePO, Defender, Tanium).
• Knowledge of scripting languages (Python, Perl, Ruby, JavaScript, PowerShell, C, C++, Java).
• Knowledge of penetration testing tools (Kali, SamuraiWTF, Nmap, Burp Suite, sqlmap, Metasploit).
• Knowledge of ticketing, reporting, and intelligence gathering for cybersecurity.

Responsibilities

• Perform all phases of the incident response lifecycle: detection, analysis, containment, eradication, recovery.
• Receive/escalate from Tier 1; support TS/SCI networks (JWICS, ATLAS, HGCC).
• Respond to incident notifications via phone/email.
• Submit ESAFs to NNWC Electronic Spillage Center.
• Monitor DLP outputs for classified indicators.
• Coordinate with SSOs, JAG, ONI ISSM, and other IC/DoD teams.
• Maintain incident docs and timelines; participate in meetings and after-action reviews.
• Support execution and evaluation of annual security exercises.

Skills

TS/SCI clearance

Incident response

DLP monitoring

Cybersecurity teamwork

Education

Bachelor's degree in Cybersecurity/IT/Info Assurance

Master's degree in Cybersecurity/IT/Info Assurance

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Kali

Nmap

Burp Suite

Metasploit

Python

PowerShell

C

C++

Java

Job description

Leidos is seeking two Incident Responders to support the Navy's cybersecurity operations at the ONI HGCC in Suitland, MD. The role requires handling 2nd and 3rd shifts on weekdays, with training during the day shift for the first two months.

You will defend critical networks, investigate incidents, contain systems, and coordinate with security peers. A TS/SCI clearance and extensive incident response expertise are required for this full-time, on-site position.