Cyber Real-Time Analyst Job Pearl City area,Hawaii USA,IT/Tech

Description

Join the Team Defending the Pacific's Front Line in Cyberspace Leidos is hiring Real Time Analysts to join the Network Assurance Team supporting DISA Pacific (DNC-PAC) at Ford Island, Joint Base Pearl Harbor-Hickam. This team serves as the Security Operations Center (SOC) for USPACOM and the broader DoD Information Network (DODIN/DISN), standing watch 24/7/365 to detect, analyze, and respond to threats against the boundary of the Department of Defense's global network.

What You ll Do

Boundary Cyber Defense & SOC Operations

Monitor, detect, and analyze intrusions, incidents, and threats across the DODIN/DISN boundary — Internet Access Points, Boundary Cloud Access Points, and related infrastructure — using DoD-approved network monitoring and traffic analysis tools on a 24/7/365 basis.
Perform near real-time triage of security events, correlating alerts,netflow, IDS/IPS output, and raw packet captures to confirm or refute malicious activity.
Conduct deep-dive analysis of “low and slow” activity to uncover unauthorized access that automated tools miss.
Investigate and analyze events using SIEM platforms including Splunk, Elastic, and Microsoft Sentinel, and correlate sensor data through the Thunder Dome cybersecurity suite.
Apply the MITRE ATT&CK framework to characterize adversary tactics, techniques, and procedures, and to guide incident analysis and threat-hunting.
Develop, tune, and recommend custom detection signatures and countermeasures to prevent or mitigate emerging threats.
Document analysis and findings in the DoD-mandated incident reporting/ticketing system, and issue Situational Awareness Reports and TIPPERs to mission partners.
Coordinate directly with the DISA Joint Operations Center (DJOC), USCYBERCOM, and peer SOCs to synchronize threat intelligence and incident response across the DODIN.

Joint Fires Network (JFN) SOC Support

Support stand-up and sustainment of a 24x7x365 Security Operations Center for the JFN IL-6 environment, focused on threat detection and continuous monitoring across JFN nodes.
Conduct Syslog review and Elastic stack alerting to identify anomalies, and tune advanced sensors such as Corelight as the SOC matures.
Triage, escalate, and track incidents through JIRA using standardized SOC intake and escalation processes.
Handle TS/SCI-level incidents in accordance with DIA-aligned requirements, ensuring spills, breaches, or anomalies are reported through authorized channels within mandated timelines.
Develop threat-hunting playbooks focused on behavioral anomalies and traffic pattern analysis as the mission matures from initial monitoring into full detection and response.
Work from a Sensitive Compartmented Information Facility (SCIF) at DISA Pacific, Ford Island.

What You ll Need For Success

Active Top Secret security clearance with eligibility/ability to obtain SCI
Education and experience requirements depending on job level, as follows:

Level II:
Bachelor s degree and 2+ years of relevant experience; equivalent work experience and/or military service may be considered in lieu of a degree.
Level III:
Bachelor s degree and 4+ years of relevant experience; equivalent work experience and/or military service may be considered in lieu of a degree.

Qualifications/credentials compliant with DoD 8140 DCWF Code 531, Cyber Defense Analyst at the Intermediate proficiency level.
Hands-on experience with Computer Network Defense duties — protect, defend, respond, and sustain.
Strong networking fundamentals, including communication protocols and common security tooling (IDS/IPS, firewalls).
Experience evaluating packet captures and analyzing raw network traffic.
Willingness and ability to work rotating shifts in support of…