# Senior Incident Response Analyst

**Company**: Leidos
**Experience**: senior
**Job type**: full-time
**Salary**: $107,900.00 - $195,050.00
**Category**: Security
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Arlington-VA/Senior-Incident-Response-Analyst_R-00195002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_3e81f084-bb4

## Description

The Digital Modernization Sector at Leidos is seeking a Senior Incident Response Analyst to support the DHS CISA Program. The successful candidate will be part of a team responsible for monitoring, detecting, analyzing, mitigating, and responding to cyber threats and adversarial activity on the DHS Enterprise.

The Incident Responder will perform the following:

- Coordinate investigation and response efforts throughout the Incident Response lifecycle

- Correlate and analyze events and data to determine scope of Cyber Incidents

- Acquire and analyze endpoint and network artifacts, volatile memory, malicious files/binaries and scripts

- Recognize attacker tactics, techniques, and procedures as potential indicators of compromise (IOCs) that can be used to improve monitoring, analysis and Incident Response

- Develop, document, and maintain Incident Response process, procedures, workflows, and playbooks

- Tune and maintain security tools (EDR, IDS, SIEM, etc) to reduce false positives and improve SOC detection capabilities

- Document Investigation and Incident Response actions taken in Case Management Systems and prepare formal Incident Reports

- Create metrics and determine Key Performance Indicators to drive maturity of SOC operations

- Develop security content such as scripts, signatures, and alerts

The basic qualifications for this role include:

- Bachelor's degree in Computer Science, Engineering, Information Technology, Cyber Security, or related field and 8-12 years of related experience

- In-depth knowledge of each phase of the Incident Response life cycle

- Expertise of Operating Systems (Windows/Linux) operations and artifacts

- Expertise of Enterprise Network Architectures to include routing/switching, common protocols (DHCP, DNS, HTTP, etc), and devices (Firewalls, Proxies, Load Balancers, VPN, etc)

- Ability to recognize suspicious activity/events, common attacker TTPs, and perform logical analysis and research to determine root cause and scope of Incidents

- Expertise with Cyber Kill Chain and have utilized the ATT&CK Framework

- Scripting experience with Python, PowerShell, and/or Bash

- Ability to independently prioritize and complete multiple tasks with little to no supervision

- Flexible and adaptable self-starter with strong relationship-building skills

- Strong problem-solving abilities with an analytic and qualitative eye for reasoning

- Strong verbal and written communication skills

- Ability to communicate with all levels of audiences (subordinates, peers & leadership)

Preferred qualifications include experience in cyber government and/or federal law enforcement FISMA systems.

The pay range for this role is $107,900.00 - $195,050.00.

## Skills

### Required
- Incident Response
- Cyber Security
- Operating Systems
- Enterprise Network Architectures
- Python
- PowerShell
- Bash
- ATT&CK Framework

### Nice to have
- FISMA systems
- cyber government
- federal law enforcement

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Arlington-VA/Senior-Incident-Response-Analyst_R-00195002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)