Senior Incident Response Analyst – Cyber Defense

Leidos; Seaside (OR); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking an experienced Incident Response Analyst to support the DMDC CyberPRIMES program, investigating and responding to cybersecurity events affecting DHRA and DMDC systems. You will manage the full incident-response lifecycle from detection to post-incident activities and coordinate with SOC analysts and government stakeholders.

Responsibilities include analyzing SIEM, endpoint-security, firewalls, IDS/IPS, and related tools; coordinating containment and eradication with system

Qualifications

• Bachelor’s degree with 5+ years in cybersecurity or equivalent.
• Experience in incident response, SOC operations, or security-event investigation.
• Experience analyzing cybersecurity events to determine response.
• Experience coordinating incidents across technical teams and stakeholders.
• U.S. Citizenship and an Active Secret clearance required.
• Willingness to participate in after-hours incident response.

Responsibilities

• Support the full incident-response lifecycle from detection to post-incident activities.
• Investigate incidents affecting NIPRNet and SIPRNet environments.
• Analyze security data from SIEM, IDS/IPS, firewalls, and endpoint-security tools.
• Contain, eradicate, recover, and coordinate with system owners and technical teams.
• Collect and preserve technical evidence and maintain incident records.
• Provide status updates during active investigations and assist with lessons learned.
• Participate in after-hours incident response as required.

Skills

Incident response

Security Operations Center (SOC)

Threat analysis

Evidence collection

Communication under pressure

Team coordination

Education

Bachelor’s degree in cybersecurity or related field

Tools

SIEM platforms

Endpoint security

Firewalls

IDS/IPS

Web security

Antispam

Malware protection

Job description

Leidos is seeking an experienced Incident Response Analyst to support the DMDC CyberPRIMES program, investigating and responding to cybersecurity events affecting DHRA and DMDC systems. You will manage the full incident-response lifecycle from detection to post-incident activities and coordinate with SOC analysts and government stakeholders.

Responsibilities include analyzing SIEM, endpoint-security, firewalls, IDS/IPS, and related tools; coordinating containment and eradication with system