Cybersecurity Analyst

Leidos Digital Modernization sector seeks talented and cleared Cyber Security Analysts to support the DISA GSM-O II program. The role is part of a 24×7 security operations team, defending DoD networks from evolving cyber threats.

As a Cyber Security Analyst, you will defend Department of Defense networks from evolving cyber threats. You will be a key member of our 24×7 security operations team, responsible for analyzing real‑time cyber threat intelligence, correlating security events, conducting in-depth network traffic analysis, and collaborating with incident response teams to contain and eradicate threats.

Flexible shift options: 7:00 AM – 3:00 PM, 3:00 PM – 11:00 PM, and 11:00 PM – 7:00 AM. Shift assignments are based on program requirements and your preference, with some flexibility required.

Scott AFB, IL.

• Investigate alerts from endpoints, IDS/IPS, Net Flow data, and custom sensors to detect compromises.
• Analyze extensive log files, pivot between diverse datasets, and correlate evidence to support incident investigations, producing detailed technical reports.
• Triage security alerts to rapidly identify malicious actors targeting customer networks.
• Monitor and analyze DoD and open‑source intelligence feeds to identify Indicators of Compromise (IOCs) and integrate them into security sensors and SIEMs.
• Report security incidents to customers and USCYBERCOM, ensuring timely communication and coordinated response.
• Analyze real‑time cyber threat intelligence to stay ahead of emerging threats.
• Conduct in‑depth network traffic analysis using raw packet data to uncover malicious activity.
• Collaborate with incident response teams to contain and eradicate threats.

• Minimum active DoD Secret clearance with the ability to obtain TS/SCI.
• Current DoD 8570 IAT Level II certification (or higher), such as CompTIA Security+ CE, ISC2 SSCP, or SANS GSEC.
• Ability to obtain DoD 8570 CSSP-A Level Certification (e.g., CEH, CySA+, GCIA) within 180 days of hire.
• Strong foundation in networking, including packet analysis, common ports and protocols, traffic flow, OSI model, and defense‑in‑depth security principles.
• Education and experience:
  
  Level I – Bachelor's degree and 1+ years of relevant experience (or equivalent work experience/military service);
  Level II – Bachelor's degree and 3+ years of relevant experience (or equivalent).
• Proven ability to work effectively independently and as a collaborative team member.
• Committed to continuous learning and self‑improvement, evidenced by pursuing certifications and participating in industry forums.
• Excellent problem‑solving skills and ability to communicate technical information clearly and concisely.
• Reliable and flexible, with a demonstrated willingness to work assigned shifts.
• Located within a commutable distance (within 2 hours) of Scott AFB, IL, or able to self‑relocate.

• Hands‑on experience analyzing large volumes of logs, network data (Net Flow, Full Packet Capture), and other attack artifacts during incident investigations.
• In‑depth experience with SIEM/SOAR platforms to analyze multiple log types and events, applying behavioral analysis, statistical analysis, and machine learning to detect and respond to advanced threats.
• Comprehensive understanding of the network threat lifecycle, attack vectors, and tactics, techniques, and procedures (TTPs).
• Experience with Anti‑Virus, HIPS/HBSS, IDS/IPS, Full Packet Capture, and Network Forensics tools.
• Experience monitoring, defending, or administering cloud networks (AWS, Azure, GCP) and cloud‑native security tools, including mitigating cloud‑specific attacks.
• Experience managing, defending, administering, or deploying mobile devices (iOS, Android) for enterprise, including MDM, MAM, and MTD.
• Scripting and programming skills.

$69,550.00 - $

Competitive compensation, Health and Wellness programs, Income Protection, Paid Leave, and Retirement.

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.