> Markdown version of [/jobs/ext/2940200-incident-responder](https://www.wearedevelopers.com/jobs/ext/2940200-incident-responder). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Responder

- **Company:** Leidos, Inc.
- **Location:** Suitland-Silver Hill, MD, United States
- **Salary:** $115,000.0 - $145,000.0
- **Contract:** Permanent contract
- **Skills:** Digital Forensics, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Security Information and Event Management, Scripting, Cloud Platform System, QRadar, Malware, Cyber Threat Analysis, Splunk, Vulnerability Analysis
- **Published:** September 16, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2973656251-2

## About the Role

* Incident response
 * Security monitoring
 * SIEM tools (e.g., Splunk, QRadar)
 * Network security analysis
 * Endpoint detection and response (EDR)
 * Digital forensics
 * Malware analysis basics
 * Threat intelligence
 * Scripting/automation (Python, Power
 * Shell)
 * Security documentation and reporting

## Description

Leidos is seeking an Incident Responder to protect mission-critical systems for government and commercial clients. You will monitor security tools, analyze alerts, contain threats, and lead response activities across complex IT and cloud environments. Responsibilities include triage, forensic analysis, root-cause investigation, documentation, and lessons-learned reviews. You'll collaborate with SOC, engineering, and business teams to improve incident processes and harden defenses, while contributing to a culture of integrity, innovation, and continuous learning in a highly collaborative, mission-driven environment., * Monitor and analyze security alerts across networks, endpoints, and cloud environments.

 * Triage, investigate, and contain cyber incidents to minimize business and mission impact.
 * Perform basic forensics and root-cause analysis to understand attack vectors and scope.
 * Document incidents, actions taken, and lessons learned in clear, detailed reports.
 * Coordinate with SOC analysts, engineers, and stakeholders during incident handling.
 * Develop and refine incident response playbooks, runbooks, and standard procedures.
 * Contribute to threat hunting and continuous improvement of detection capabilities.
 * Support security awareness and readiness activities across technical teams.