Weekend Incident Responder - TS/SCI Cyber Defense

Leidos; Suitland (MD); On-site; USD 108,000 - 195,000; Part time

Job summary

Leidos is seeking two Incident Responders for the ONI HGCC in Suitland, MD. This part-time weekend role runs 24 hours per week, with two regular weekend schedules and a two-month full-time training period.

The position defends TS/SCI networks by investigating incidents, containing threats, and analyzing digital artifacts. You’ll work with cybersecurity partners across multiple teams in a critical national-security environment.

Qualifications

• Bachelor’s degree with extensive cybersecurity experience or a Master’s with significant work history.
• Active TS/SCI clearance required.
• Extensive experience in computer network defense (CND).
• Experience with SIEM systems (Splunk, Elastic).
• Experience with NIDS/NIPS and NGFWs (FirePower, Palo Alto).
• Proficient in scripting languages and common cybersecurity tools.
• Knowledge of penetration testing tooling and methodologies.

Responsibilities

• Perform all phases of the incident response lifecycle.
• Receive and act on escalations from Tier 1 analysts.
• Support incident response for TS/SCI networks including JWICS and ATLAS.
• Prepare ESAFs to NNWC Electronic Spillage Center.
• Monitor DLP outputs for spillage indicators.
• Coordinate with SSOs, JAG, ONI ISSM, and other teams.
• Maintain detailed incident documentation and timelines.
• Participate in incident response meetings and reviews.
• Support annual security exercises.

Skills

CND experience

SIEM Splunk Elastic

NIDS/NIPS FirePower

Palo Alto NGFW

Trellix ePO

Scripting languages

Incident response

Kali Metasploit

Education

Bachelor's degree in Cybersecurity/IT/IA or related field

8+ years experience or Master’s with 6+ years

Tools

Job description

Leidos is seeking two Incident Responders for the ONI HGCC in Suitland, MD. This part-time weekend role runs 24 hours per week, with two regular weekend schedules and a two-month full-time training period.

The position defends TS/SCI networks by investigating incidents, containing threats, and analyzing digital artifacts. You’ll work with cybersecurity partners across multiple teams in a critical national-security environment.