Senior Incident Response Lead – SOC & Cyber Defense

Leidos Inc; Washington (District of Columbia); Sur place; USD 108 000 - 195 000; Plein temps

Résumé du poste

Leidos is seeking an Incident Response Lead to join the DHS Security Operations Center support team. The role focuses on monitoring, detecting, mitigating, and responding to cyber threats within a high-visibility government program.

Ideal candidates hold a TS/SCI clearance, CISSP, and SANS GCIA/GCIH, with 8–12 years in technical cyber fields and 4+ years leading teams. Strong communication and execution of incident response are required.

Qualifications

• Bachelor's Degree and 8-12 years of experience in a technical discipline.
• 4+ years of supervising and/or managing teams.
• 5+ years of intrusion detection and/or incident handling experience.
• CISSP and SANS GCIH or GCIA required upon start.
• Advanced knowledge in planning, directing, and managing SOC operations for a large enterprise.

Responsabilités

• In-depth knowledge of each phase of the Incident Response life cycle.
• Expertise in Windows/Linux operations and artifacts.
• Understand enterprise network architectures and devices (firewalls, proxies, load balancers, VPN).
• Recognize suspicious activity and determine root cause and scope of incidents.
• Drive implementation and improvement of tools, frameworks, and methodologies.
• Mentor analysts and ensure high-quality analysis and deliverables.
• Establish trust and relationships with customer and stakeholders.

Connaissances

Incident response

Threat detection

Security operations

Team leadership

Technical reporting

Formation

Bachelor's Degree

Description du poste

Leidos is seeking an Incident Response Lead to join the DHS Security Operations Center support team. The role focuses on monitoring, detecting, mitigating, and responding to cyber threats within a high-visibility government program.

Ideal candidates hold a TS/SCI clearance, CISSP, and SANS GCIA/GCIH, with 8–12 years in technical cyber fields and 4+ years leading teams. Strong communication and execution of incident response are required.