Tier 2 Incident Response Analyst

Leidos; Virginia, Ashburn (MN, VA); On-site; USD 85,000 - 154,000; Full time

Job summary

An established industry player is seeking an experienced Incident Response Analyst to join their dynamic cyber security operations center. This role involves monitoring, detecting, and responding to cyber threats, ensuring the security of critical information systems. The ideal candidate will have a strong background in incident detection, malware analysis, and computer forensics, as well as a solid understanding of networking protocols. This is an excellent opportunity to contribute to national security efforts while working in a collaborative and fast-paced environment. If you are passionate about cyber security and ready to make a significant impact, this position is for you.

Qualifications

• 4-8 years of experience in incident detection and response.
• Familiarity with TCP/IP, netflow analysis, and packet analysis tools.

Responsibilities

• Monitor and respond to cyber threats in a 24x7x365 SOC environment.
• Investigate and report on security violations and incidents.

Skills

Incident Detection and Response

Malware Analysis

Computer Forensics

Cyber Threat Analysis

TCP/IP Networking

Scripting (Python, Bash, etc.)

Education

Bachelor's Degree

Security+ Certification

COMPTIA Network+ Certification

Tools

WireShark

Intrusion Detection Systems

Job description

Description

Leidos is seeking an experienced Incident Response Analyst to support this highly visible cyber security operations center (SOC) for Customs Border Protection (CBP), cyber analysis, application development, and a 24x7x365 support staff.

The Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) is a US Government program responsible for preventing, identifying, containing, and eradicating cyber threats to CBP networks through monitoring, intrusion detection, and protective security services to CBP information systems including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public facing websites, wireless, mobile/cellular, cloud, security devices, servers, and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems, and collects, investigates, and reports any suspected and confirmed security violations.

Primary Responsibilities:

• Shift schedule: 7am - 7pm, Thurs-Sat, every other Wednesday.

• The ideal candidate will have a basic understanding of cyber threats, information security, and monitoring and detection. The candidate must be familiar with TCP/IP ports and protocols, intrusion detection systems, and netflow analysis.

• Security+ Certification or equivalent in industry certification, background, and knowledge.

• Knowledge of TCP/UDP/IP networking, familiarity with packet analysis tools such as WireShark, and a general understanding of networking protocols similar to COMPTIA Network+.

Basic Qualifications:

• Bachelor's Degree and 4-8 years of experience in the areas of incident detection and response, remediation malware analysis, or computer forensics.

• Prior relevant experience should be in the areas of incident detection and response, malware analysis, or computer forensics.

• Additional certs may be considered in place of a degree.

• Must be a US Citizen.

Clearance: A Secret Clearance is required with the ability to obtain a Top Secret SCI. In addition to specific security clearance requirements, all CBP SOC employees are required to successfully complete a CBP Background Investigation to support this program.

Preferred Qualifications:

• Experience in Federal Government, DOD, or Law Enforcement in CND, IR or SOC role.

• Cyber Kill Chain Knowledge.

• Ability to script in one or more of the following computer languages: Python, Bash, Visual Basic, or Powershell.

• One of the following certs: CCNA, CCNP, CCSP, CEH, CNDA, DCITA, ECES, ECSA, ECSP, ECSS, ENSA, GCIA, GCIH, GISF, GNFA, GPPA, GWEB, LPT, OSCP, OSEE, SEI, CCISO.

Original Posting Date:

2025-02-07

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $85,150.00 - $153,925.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.