Lead Incident Response & SOC Operations

Leidos; Washington; On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking an Incident Response Lead to join our team for a high-visibility DHS SOC support program. The role focuses on incident lifecycle, analysis, and operations leadership across Windows and Linux environments, with senior-level guidance to analysts.

The candidate must hold a active TS/SCI clearance and have strong communication skills to craft technical reports and coordinate with stakeholders. This role requires US citizenship and security clearances.

Qualifications

• Bachelor’s degree or higher in a technical discipline; 8–12 years of relevant experience.
• CISSP and SANS GCIH or GCIA required upon start.
• Experience supervising and leading SOC/CIRT operations.

Responsibilities

• In-depth knowledge of each phase of the Incident Response life cycle.
• Lead and manage SOC/IR operations for a large enterprise.
• Provide guidance and mentorship to analysts to ensure high-quality analysis.

Skills

Incident response

Cybersecurity analysis

Mentorship

Communication

Education

Bachelor’s degree

CISSP

SANS GCIH/GCIA

Tools

Windows

Linux

Firewalls

Job description

Leidos is seeking an Incident Response Lead to join our team for a high-visibility DHS SOC support program. The role focuses on incident lifecycle, analysis, and operations leadership across Windows and Linux environments, with senior-level guidance to analysts.

The candidate must hold a active TS/SCI clearance and have strong communication skills to craft technical reports and coordinate with stakeholders. This role requires US citizenship and security clearances.