Senior Cyber Incident Response Analyst (Remote)

Leidos; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

Leidos is seeking a Senior Incident Response Analyst to support the DHS CISA SOC program. The role involves coordinating investigations, analyzing events, and producing formal incident reports across the response lifecycle.

Ideal candidates hold a Bachelor's degree with 12–15 years of related experience, strong Windows/Linux and network knowledge, and proficiency in Python/PowerShell/Bash. Excellent communication is essential.

Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Technology, Cyber Security, or related field; 12–15 years of related experience.
• Expertise in incident response lifecycle phases and related tooling.
• Proficiency with Windows/Linux environments, network devices, and common protocols.
• Experience applying Cyber Kill Chain and ATT&CK frameworks.
• Scripting experience with Python, PowerShell, or Bash.
• Strong written and verbal communication across all levels.

Responsibilities

• Coordinate investigation and response across the Incident Response lifecycle.
• Correlate events to determine scope of cyber incidents.
• Acquire and analyze endpoint and network artifacts, memory, and scripts.
• Document actions and findings in Case Management Systems.
• Develop and maintain incident response playbooks and procedures.
• Tune security tools to reduce false positives and improve SOC detections.

Skills

Incident response lifecycle

Windows/Linux

Network architectures

ATT&CK framework

Cyber Kill Chain

Scripting: Python/PowerShell/Bash

Communication

Prioritization

Education

Bachelor's degree

Tools

EDR

IDS

SIEM

Job description

Leidos is seeking a Senior Incident Response Analyst to support the DHS CISA SOC program. The role involves coordinating investigations, analyzing events, and producing formal incident reports across the response lifecycle.

Ideal candidates hold a Bachelor's degree with 12–15 years of related experience, strong Windows/Linux and network knowledge, and proficiency in Python/PowerShell/Bash. Excellent communication is essential.