Senior Incident Response Analyst

Leidos

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Arlington, VA
Salary: $107,900–$195,050 / yr
Employment: Full-time
Posted: 7 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $147k

This role $151k

$97k $206k

below market most similar roles pay here above market

This role pays more than 52% of similar roles. Most pay $117,987–$175,562 — the blue band above. At the midpoint, this role pays about $151k versus about $147k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Senior Incident Response Analyst

Role Posting Log in to save

The Senior Incident Response Analyst joins the Digital Modernization Sector to support the DHS CISA Program. This role involves coordinating investigation and response efforts throughout the incident response lifecycle for the DHS Enterprise. You will correlate data to determine the scope of cyber incidents, acquire endpoint and network artifacts, and analyze volatile memory, malicious files, and scripts. Key responsibilities include developing playbooks, tuning security tools like EDR, IDS, and SIEM, and creating security content such as signatures and alerts. You must demonstrate expertise in Windows and Linux operating systems, enterprise network architectures, and the ATT&CK Framework. Required skills include scripting with Python, PowerShell, and Bash, alongside experience in malware analysis or computer forensics to mitigate adversarial activity and improve SOC detection capabilities.

Skills

Incident Response EDR IDS SIEM Python PowerShell Bash Malware Analysis Computer Forensics Windows Linux Firewalls VPN Proxies Load Balancers ATT&CK Framework Cyber Kill Chain FISMA

What you'll do

Coordinate investigation and response efforts throughout the entire Incident Response lifecycle.
Correlate and analyze events and data to determine the scope of cyber incidents.
Acquire and analyze endpoint and network artifacts, volatile memory, and malicious files.
Identify attacker tactics, techniques, and procedures to improve monitoring and response.
Develop, document, and maintain incident response processes, workflows, and playbooks.
Tune and maintain security tools like EDR, IDS, and SIEM to reduce false positives.
Create metrics and determine Key Performance Indicators to drive SOC maturity.
Develop security content including scripts, signatures, and alerts.

What we're looking for

Bachelor's degree in Computer Science, Engineering, Information Technology, Cyber Security, or a related field.
8 to 12 years of related experience.
Technical hands-on experience in incident detection and response, malware analysis, or computer forensics.
In-depth knowledge of each phase of the Incident Response life cycle.
Expertise in Windows/Linux operating systems and enterprise network architectures including routing, switching, and common protocols.
Expertise with the Cyber Kill Chain and the ATT&CK Framework.
Scripting experience with Python, PowerShell, and/or Bash.
Must favorably pass a 5-year Background Investigation (BI).
One of the following certifications: GCIH, GCIA, GCFA, GPEN, GCFE, GREM, CISSP, OSCP, OSCE, or OSWP.
Experience in cyber government, federal law enforcement, or FISMA systems (preferred).

Similar roles

Senior Incident Response Analyst

Leidos

Arlington, VA 37 days ago $131,300–$237,350

Incident Response EDR IDS SIEM Python PowerShell Bash Malware Analysis Computer Forensics Windows Linux Firewalls Proxies Load Balancers VPN ATT&CK Framework Cyber Kill Chain FISMA

10+ yrs exp

Save

Incident Response Analyst, Senior

Booz Allen Hamilton

Bethesda, MD 46 days ago

Splunk SIEM EDR IDS IPS SOAR Microsoft Defender Vulnerability Management Digital Forensics Packet Analysis Threat Hunting Behavioral Analytics Threat Intelligence Identity and Access Management Container Security API Security Log Analysis Incident Response Playbooks

5+ yrs exp

Save

Incident Response Analyst, Senior

Booz Allen Hamilton

Washington, DC 55 days ago

Incident Response Microsoft Defender EDR Splunk GitHub Archer SOC APT FIN EDR

5+ yrs exp

Save

Incident Response Lead

Leidos

Washington, DC +1 63 days ago $107,900–$195,050

Incident Response SOC Operations Cybersecurity Analysis Windows Linux Network Architecture Firewalls Proxies Load Balancers VPN DHCP DNS HTTP Cyber Kill Chain Automation Intrusion Detection

8+ yrs exp

Save

SOC Analyst

Leidos

Alexandria, VA 27 days ago $107,900–$195,050

Incident Response SIEM Splunk ArcSight QRadar LogLogic IDS/IPS Netflow Full Packet Capture Network Forensics Unix Linux TCP/IP MITRE ATT&CK Cyber Kill Chain Malware Analysis CompTIA Security+ CySA+ CEH GCIA

8+ yrs exp

Save

Cyber Threat Intelligence Analyst

Leidos

Washington, DC +2 48 days ago

Cyber Threat Intelligence MITRE ATT&CK Splunk Python Incident Response Threat Hunting Malware Analysis CrowdStrike Falcon Tanium Proofpoint TAP Zscaler Bash PowerShell C++ HTML XML Cyber Kill Chain Diamond Model Structured Analytic Technique Forensics

8+ yrs exp

Save