Weekend Incident Responder - TS/SCI Cyber Defense

Leidos; Suitland (MD); On-site; USD 108,000 - 195,000; Part time

Job summary

Leidos is hiring two Incident Responders to support the Office of Naval Intelligence (ONI) Hopper Global Communications Center in Suitland, MD. These part-time weekend roles involve defending critical networks, investigating incidents, and coordinating with internal and external partners.

The positions require TS/SCI clearance, strong CND and SIEM experience, and the ability to work a full training period during the day shift. Regular weekends alternate between day and night shifts.

Qualifications

• Degree in Cybersecurity or related field; 8+ years experience or Master’s with 6+ years.
• Active TS/SCI clearance in DISS.
• Extensive experience in Computer Network Defense (CND).
• Experience with SIEM: Splunk and Elastic.
• Knowledge of scripting languages: Python, Perl, PowerShell, JavaScript.

Responsibilities

• Perform all phases of incident response lifecycle: detection, analysis, containment, eradication, recovery.
• Receive and act on escalations from Tier 1 analysts; support TS/SCI networks.
• Respond to incident notifications via phone and email; maintain timelines.
• Submit ESAFs to NNWC Electronic Spillage Center; monitor DLP indicators.
• Coordinate with SSOs, JAG, ONI ISSM, and other IC/DoD teams.
• Document incidents and participate in after-action reviews; support security exercises.

Skills

CND discipline

Incident response

Security clearance TS/SCI

Documentation

Communication

Scripting basics

Education

Bachelor's degree in Cybersecurity/Info Tech/Info Assurance

Master’s degree (optional)

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Job description

Leidos is hiring two Incident Responders to support the Office of Naval Intelligence (ONI) Hopper Global Communications Center in Suitland, MD. These part-time weekend roles involve defending critical networks, investigating incidents, and coordinating with internal and external partners.

The positions require TS/SCI clearance, strong CND and SIEM experience, and the ability to work a full training period during the day shift. Regular weekends alternate between day and night shifts.