Cyber Incident Response Analyst

Via Logic LLC; Alexandria (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking an experienced Incident Response Analyst to support the DMDC CyberPRIMES program, with responsibilities spanning the full incident-response lifecycle, from detection and analysis through containment, eradication, recovery, and post-incident activities.

The role collaborates with SOC analysts, CSSPs, system owners, and technical teams to investigate cybersecurity events affecting DHRA and DMDC environments, maintain evidence, and provide timely status updates during active

Qualifications

• Bachelor's degree and 5+ years of cybersecurity experience.
• Experience supporting incident response and SOC operations.
• Experience documenting timelines, evidence, and actions.
• Ability to work under time-sensitive conditions and after-hours recall.
• U.S. Citizenship and active Secret clearance required.

Responsibilities

• Support preparation, detection, analysis, containment, eradication, recovery, and post-incident activities.
• Investigate cybersecurity incidents affecting NIPRNet and SIPRNet environments.
• Perform proactive security monitoring and analysis to identify intrusion attempts.
• Analyze SIEM, endpoint-security, firewalls, IDS/IPS, web-security, and malware-prevention data.
• Coordinate eradication and recovery with system owners and technical teams.
• Maintain incident records, timelines, and supporting evidence.
• Provide timely status updates during active investigations.
• Participate in after-hours incident response when required.

Skills

Incident response

SOC operations

SIEM analysis

Security monitoring

Education

Bachelor's degree

Tools

SIEM

IDS/IPS

Firewall

Endpoint security

Job description

Leidos is seeking an experienced Incident Response Analyst to support the DMDC CyberPRIMES program, with responsibilities spanning the full incident-response lifecycle, from detection and analysis through containment, eradication, recovery, and post-incident activities.

The role collaborates with SOC analysts, CSSPs, system owners, and technical teams to investigate cybersecurity events affecting DHRA and DMDC environments, maintain evidence, and provide timely status updates during active