Defense Cyber Incident Responder

Koitecc Solutions; Seaside (CA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos seeks an experienced Incident Response Analyst to support the DMDC CyberPRIMES program and protect DHRA/DMDC systems. You will investigate incidents and manage the full lifecycle from detection to post-incident activities.

Work with SOC analysts, CSSPs, and system owners during active incidents, analyzing SIEM, endpoint security, firewalls, IDS/IPS, and related tools. Requires Active Secret clearance and U.S. citizenship.

Qualifications

• ,

Responsibilities

• Support preparation, detection, analysis, containment, eradication, recovery, and post-incident activities for cybersecurity events and incidents.
• Investigate cybersecurity incidents affecting NIPRNet and SIPRNet environments.
• Perform proactive security monitoring and analysis to identify potential intrusion attempts and other malicious activity.
• Analyze security information from SIEM platforms, endpoint-security capabilities, firewalls, IDS/IPS, web-security systems, and related enforcement technologies.
• Coordinate eradication and recovery activities with system owners, administrators, network personnel, and other technical stakeholders.
• Maintain complete and accurate incident records, timelines, supporting evidence, investigative findings, response actions, and status information.

Skills

Incident response

SIEM analysis

Endpoint security

Firewalls

IDS/IPS

Evidence collection

Incident coordination

Security monitoring

Education

Bachelor's degree

Tools

eMASS

Job description

Leidos seeks an experienced Incident Response Analyst to support the DMDC CyberPRIMES program and protect DHRA/DMDC systems. You will investigate incidents and manage the full lifecycle from detection to post-incident activities.

Work with SOC analysts, CSSPs, and system owners during active incidents, analyzing SIEM, endpoint security, firewalls, IDS/IPS, and related tools. Requires Active Secret clearance and U.S. citizenship.