Threat-Hunting Fusion Analyst (Onsite at Mark Center)

Leidos; Roppenheim; Sur place; EUR 98 000 - 177 000; Plein temps

Résumé du poste

Leidos seeks a Cyber Intelligence Fusion Analyst to serve as the proactive threat-hunting engine for the J361 SOC. The role combines cyber operations, threat intelligence, and analytic tradecraft to identify and mitigate threats affecting tenants and mission operations across environments.

You will develop hunt plans, analyze adversary behavior, and deliver tailored reports and briefings to leadership, while coordinating with incident responders and SOC teams onsite at the Mark Center in

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, intelligence studies, or a related technical discipline; 8+ years of relevant experience; at least 4 years in cybersecurity operations, threat hunting, incident response, or related fields.

Responsabilités

• Ingest, analyze, and synthesize threat reporting to identify threats relevant to the environment.
• Correlate external threat intelligence with SIEM, EDR, and telemetry to identify malicious activity.
• Conduct proactive IOC sweeps and threat hunts to identify activity tied to adversary campaigns and vulnerabilities.
• Characterize adversary infrastructure, malware, and TTPs using MITRE ATT&CK and related frameworks; assess risks to assets and operations.
• Develop hunt plans, detections, and run complex queries; document findings in action-ready reports and briefings.

Connaissances

Threat hunting

Incident response

Threat intelligence

MITRE ATT&CK

SPL/KQL/SQL/Python

SIEM/EDR analysis

Executive briefings

Threat modeling

Formation

Bachelor’s degree in cybersecurity or related field

Outils

Splunk

Elastic

Wireshark

PCAP analysis

NetFlow

EDR

Python

Description du poste

Leidos seeks a Cyber Intelligence Fusion Analyst to serve as the proactive threat-hunting engine for the J361 SOC. The role combines cyber operations, threat intelligence, and analytic tradecraft to identify and mitigate threats affecting tenants and mission operations across environments.

You will develop hunt plans, analyze adversary behavior, and deliver tailored reports and briefings to leadership, while coordinating with incident responders and SOC teams onsite at the Mark Center in