Senior Incident Response Lead

Leidos LLC; Arlington (VA); On-site; USD 131,000 - 237,000; Full time

Benefits offered by this job

Health and Wellness programs

Paid leave

Retirement plan

Job summary

Leidos LLC is seeking a Senior Incident Response Analyst to support the DHS CISA Security Operations Center (SOC) program. The role focuses on coordinating investigations, analyzing events, and developing incident response playbooks across Windows and Linux environments.

Ideal candidates have a strong IR life cycle background, ATT&CK framework understanding, and scripting skills (Python/PowerShell/Bash). This position requires a bachelor's in a related field and extensive cyber experience, with

Qualifications

• Bachelors degree in Computer Science, Engineering, IT, Cyber Security or related field with 12–15 years of experience; higher experience may substitute for degree.
• In-depth knowledge of the Incident Response life cycle and OS (Windows/Linux).
• Experience with enterprise network architectures, routing/switching, and common protocols.
• Ability to identify suspicious activity, attacker TTPs, and determine root cause and scope.
• Proficiency with ATT&CK framework and scripting (Python/PowerShell/Bash).
• Strong communication and ability to work with all levels of staff.

Responsibilities

• Coordinate investigation and response across the Incident Response lifecycle.
• Correlate events to determine the scope of cyber incidents.
• Analyze endpoint and network artifacts, memory, files, and scripts.
• Tune security tools to reduce false positives and improve detection.
• Document actions and prepare formal incident reports.
• Develop metrics and playbooks to mature SOC operations.
• Create scripts, signatures, and alerts for security content.

Skills

Incident response

Threat analysis

Scripting (Python/PowerShell/Bash)

Communication

Analytical thinking

Education

Bachelors in CS/Engineering/IT/Cyber Security

Cyber security certifications (preferred)

Tools

EDR

IDS

SIEM

Firewalls

Job description

Leidos LLC is seeking a Senior Incident Response Analyst to support the DHS CISA Security Operations Center (SOC) program. The role focuses on coordinating investigations, analyzing events, and developing incident response playbooks across Windows and Linux environments.

Ideal candidates have a strong IR life cycle background, ATT&CK framework understanding, and scripting skills (Python/PowerShell/Bash). This position requires a bachelor's in a related field and extensive cyber experience, with