Remote Incident Response Analyst - Cyber Defense

Leidos Inc; Alexandria (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking experienced Incident Response Analysts to support the DMDC CyberPRIMES program. The role focuses on investigating and responding to cybersecurity events affecting DHRA systems, collaborating with SOC analysts, CSSPs, system owners, and technical teams during active incidents.

You will perform detection, analysis, containment, eradication, recovery, and post-incident activities and maintain complete incident records. U.S. Citizenship and an Active Secret clearance are required.

Qualifications

• Bachelor's degree and 4+ years of cybersecurity experience.
• Experience supporting cybersecurity incident response, SOC operations, cyber defense, or security-event investigation.
• Experience performing analysis of cybersecurity events and determining appropriate response or escalation actions.
• Experience supporting containment, eradication, recovery, and post-incident activities.
• Experience monitoring and analyzing enterprise cybersecurity tools and telemetry.
• Experience documenting incident timelines, evidence, response actions, and status.
• Experience coordinating cybersecurity incidents across technical teams and stakeholders.
• U.S. Citizenship required, Active Secret security clearance required.

Responsibilities

• Support preparation, detection, analysis, containment, eradication, recovery, and post-incident activities for cybersecurity events and incidents.
• Investigate cybersecurity incidents affecting NIPRNet and SIPRNet environments.
• Perform proactive security monitoring and analysis to identify intrusion attempts and other malicious activity.
• Analyze security information from SIEM, EDR, firewalls, IDS/IPS, web-security, and malware-prevention systems.
• Coordinate eradication and recovery activities with system owners, administrators, and cybersecurity teams.
• Collect and preserve technical evidence and maintain incident records, timelines, and findings.
• Develop cybersecurity event and incident reporting and provide status updates during investigations.
• Participate in after-hours incident response and recall as required.

Skills

Incident response

Security operations

Threat analysis

Documentation

Communication

After-hours recall

Security clearance

Education

Bachelor's degree

Tools

SIEM

EDR

Firewall

IDS/IPS

Endpoint protection

Web security

Job description

Leidos is seeking experienced Incident Response Analysts to support the DMDC CyberPRIMES program. The role focuses on investigating and responding to cybersecurity events affecting DHRA systems, collaborating with SOC analysts, CSSPs, system owners, and technical teams during active incidents.

You will perform detection, analysis, containment, eradication, recovery, and post-incident activities and maintain complete incident records. U.S. Citizenship and an Active Secret clearance are required.